{"action":"Upgrade bleach to 3.1.1 or later.","affected":[{"fixed":"3.1.1","introduced":"0"}],"component":"bleach","cve_ids":["CVE-2020-6802"],"ecosystem":"PyPI","epss":0.01731,"exploited":false,"fixed_versions":["3.1.1"],"ghsa_id":"GHSA-q65m-pv3f-wr5r","id":"tcs_01M5KFVFBRPXN86D9CD0QHEW4K","modified_at":"2026-07-08T06:29:24.337403709Z","published_at":"2020-02-24T17:33:44Z","references":["https://osv.dev/vulnerability/GHSA-q65m-pv3f-wr5r","https://github.com/mozilla/bleach/security/advisories/GHSA-q65m-pv3f-wr5r","https://nvd.nist.gov/vuln/detail/CVE-2020-6802","https://github.com/mozilla/bleach/commit/f77e0f6392177a06e46a49abd61a4d9f035e57fd","https://advisory.checkmarx.net/advisory/CX-2020-4276","https://bugzilla.mozilla.org/show_bug.cgi?id=1615315","https://cure53.de/fp170.pdf","https://github.com/mozilla/bleach","https://github.com/pypa/advisory-database/tree/main/vulns/bleach/PYSEC-2020-27.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/72R4VFFHDRSQMNT7IZU3X2755ZP4HGNI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCNLM2MGQTOLCIVVYS2Z5S7KOQJR5JC4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YTULPQB7HVPPYWEYVNHJGDTSPVIDHIZX","https://www.checkmarx.com/blog/vulnerabilities-discovered-in-mozilla-bleach"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-q65m-pv3f-wr5r","url":"https://osv.dev/vulnerability/GHSA-q65m-pv3f-wr5r"}],"summary":"XSS in Bleach when noscript and raw tag whitelisted"}