LX
Product
lxml_html_clean
4
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 0
Watch
Add lxml_html_clean to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-49825 | 8.2 | Aug 20 | lxml: javascript: URL bypass in Cleaner via xlink:href Affected: < 0.4.5 |
| CVE-2026-28350 | 6.1 | Mar 5 | lxml_html_clean: <base> tag injection through default Cleaner configuration Affected: < 0.4.4 |
| CVE-2026-28348 | 6.1 | Mar 5 | lxml_html_clean: CSS @import Filter Bypass via Unicode Escapes Affected: < 0.4.4 |
| CVE-2024-52595 | 6.1 | Nov 19 | HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through Affected: < 0.4.0 |
Showing 4