{"action":"Upgrade bleach to 3.3.0 or later.","affected":[{"fixed":"3.3.0","introduced":"0"}],"component":"bleach","cve_ids":["CVE-2021-23980"],"ecosystem":"PyPI","epss":0.00483,"exploited":false,"fixed_versions":["3.3.0"],"ghsa_id":"GHSA-vv2x-vrpj-qqpq","id":"tcs_01M5KGFPVBZ4EJGG6T37PTM1JP","modified_at":"2023-11-08T04:05:14.166540Z","published_at":"2021-02-02T17:58:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-865","https://github.com/mozilla/bleach/security/advisories/GHSA-vv2x-vrpj-qqpq","https://advisory.checkmarx.net/advisory/CX-2021-4303","https://github.com/mozilla/bleach/commit/79b7a3c5e56a09d1d323a5006afa59b56162eb13"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-865","url":"https://osv.dev/vulnerability/PYSEC-2021-865"}],"summary":"In Mozilla Bleach before 3.3.0, a mutation XSS affects users calling bleach.clean with math or svg; p or br; and style, title, noscript, script, textarea, noframes, iframe, or xmp tags with strip_comm"}