{"action":"Upgrade lxml to 4.6.2 or later.","affected":[{"fixed":"4.6.2","introduced":"1.2"}],"component":"lxml","cve_ids":["CVE-2020-27783"],"ecosystem":"PyPI","epss":0.03982,"exploited":false,"fixed_versions":["4.6.2"],"ghsa_id":"GHSA-pgww-xf46-h92r","id":"tcs_01M5KGASDWWWH6J9TGMAMHMZRF","modified_at":"2023-11-08T04:03:22.239924Z","published_at":"2020-12-03T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-62","https://bugzilla.redhat.com/show_bug.cgi?id=1901633","https://www.debian.org/security/2020/dsa-4810","https://lists.debian.org/debian-lts-announce/2020/12/msg00028.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JKG67GPGTV23KADT4D4GK4RMHSO4CIQL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TMHVKRUT22LVWNL3TB7HPSDHJT74Q3JK/","https://advisory.checkmarx.net/advisory/CX-2020-4286","https://github.com/advisories/GHSA-pgww-xf46-h92r"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-62","url":"https://osv.dev/vulnerability/PYSEC-2020-62"}],"summary":"A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A re"}