{"action":"Upgrade bleach to 3.3.0 or later.","affected":[{"fixed":"3.3.0","introduced":"0"}],"component":"bleach","cve_ids":["CVE-2021-23980"],"ecosystem":"PyPI","epss":0.00483,"exploited":false,"fixed_versions":["3.3.0"],"ghsa_id":"GHSA-vv2x-vrpj-qqpq","id":"tcs_01M5KG0V6DZW8RF0JZBG6Y0GEY","modified_at":"2026-07-08T06:27:25.981488640Z","published_at":"2021-02-02T17:58:40Z","references":["https://osv.dev/vulnerability/GHSA-vv2x-vrpj-qqpq","https://github.com/mozilla/bleach/security/advisories/GHSA-vv2x-vrpj-qqpq","https://nvd.nist.gov/vuln/detail/CVE-2021-23980","https://github.com/mozilla/bleach/commit/79b7a3c5e56a09d1d323a5006afa59b56162eb13","https://advisory.checkmarx.net/advisory/CX-2021-4303","https://bugzilla.mozilla.org/show_bug.cgi?id=1689399","https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2021-23980","https://cure53.de/fp170.pdf","https://github.com/mozilla/bleach","https://github.com/mozilla/bleach/blob/79b7a3c5e56a09d1d323a5006afa59b56162eb13/CHANGES#L4","https://github.com/pypa/advisory-database/tree/main/vulns/bleach/PYSEC-2021-865.yaml","https://pypi.org/project/bleach"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-vv2x-vrpj-qqpq","url":"https://osv.dev/vulnerability/GHSA-vv2x-vrpj-qqpq"}],"summary":"Cross-site scripting in Bleach"}