A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python38-cffiUpgrade python2-idnaUpgrade python38-cryptographyUpgrade python38-psycopg2-docUpgrade python2-chardetUpgrade python2-setuptools-wheelUpgrade python2-numpyUpgrade python2-pyyamlUpgrade python2-docs-infoUpgrade python38-pysocksUpgrade python2-pyUpgrade python2-CythonUpgrade python2-docutilsUpgrade python2-setuptoolsUpgrade python2-sqlalchemyUpgrade python38-requestsUpgrade python2-PyMySQLUpgrade python2-numpy-docUpgrade python-sqlalchemy-docUpgrade python38-psycopg2Upgrade python38-asn1cryptoUpgrade python38-idnaUpgrade python2-backportsUpgrade python2-urllib3Upgrade python2-pytest-mockUpgrade python2-psycopg2Upgrade python2-pluggyUpgrade python38-psycopg2-testsUpgrade python2-psycopg2-debugUpgrade python38-PyMySQLUpgrade python2-ipaddressUpgrade python2-docsUpgrade python2-dnsUpgrade python2-requestsUpgrade python2-attrsUpgrade python2-markupsafeUpgrade python38-pytzUpgrade python2-sixUpgrade python2-funcsigsUpgrade python38-CythonUpgrade python38-mod_wsgiUpgrade python38-chardetUpgrade python2-rpm-macrosUpgrade python38-scipyUpgrade python2-mockUpgrade python2-psycopg2-testsUpgrade python2-coverageUpgrade python-psycopg2-docUpgrade python2-pytzUpgrade python2-setuptools_scmUpgrade python38-plyUpgrade python2-backports-ssl_match_hostnameUpgrade python38-pycparserUpgrade python38-sixUpgrade python2-pysocksUpgrade python38-markupsafeUpgrade python2-pytestUpgrade python2-numpy-f2py | May 4, 2022 | Dec 3, 2020 |
| Alpine Linux | — | Upgrade py3-lxml | Jan 5, 2021 | Dec 3, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-lxml-docsUpgrade python-lxmlUpgrade python-lxml-debuginfo | Jun 24, 2021 | Dec 3, 2020 |
| Amazon_linux | — | Upgrade python-lxml | Mar 23, 2023 | Dec 3, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 3, 2020 |
| Centos_linux | — | Upgrade python38-debugUpgrade python38-scipy-debuginfoUpgrade python2-pymongoUpgrade python2-docsUpgrade python38-cffi-debuginfoUpgrade python38-psutil-debuginfoUpgrade python2-funcsigsUpgrade python2-setuptools_scmUpgrade python2-tkinterUpgrade python2-coverage-debuginfoUpgrade python38-mod_wsgiUpgrade python38-numpy-docUpgrade python38-tkinterUpgrade python2-debugsourceUpgrade python-markupsafe-debugsourceUpgrade python2-requestsUpgrade python2-scipyUpgrade python2-scipy-debuginfoUpgrade python38-requestsUpgrade python38-psycopg2Upgrade python38-develUpgrade python2-pyyaml-debuginfoUpgrade python38-wheel-wheelUpgrade scipy-debugsourceUpgrade python38-rpm-macrosUpgrade python-psycopg2-debugsourceUpgrade python3-lxmlUpgrade python38-numpy-f2pyUpgrade python38-wheelUpgrade numpy-debugsourceUpgrade python38-plyUpgrade python-sqlalchemy-docUpgrade python38-psycopg2-debuginfoUpgrade python2-virtualenvUpgrade python38-setuptools-wheelUpgrade python38-idnaUpgrade python-psutil-debugsourceUpgrade python2-sqlalchemyUpgrade python2-pytest-mockUpgrade python2-psycopg2-testsUpgrade python38-psycopg2-docUpgrade babelUpgrade python2-numpy-docUpgrade python2-psycopg2-debuginfoUpgrade python38-Cython-debuginfoUpgrade python2-PyMySQLUpgrade python2-setuptoolsUpgrade Cython-debugsourceUpgrade python2-markupsafeUpgrade python38-cryptography-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python38-pycparserUpgrade python2-develUpgrade python2-lxmlUpgrade python2-pygmentsUpgrade python2-pysocksUpgrade python2-psycopg2Upgrade python2-urllib3Upgrade python2-wheel-wheelUpgrade python38-setuptoolsUpgrade python38-jinja2Upgrade python38-asn1cryptoUpgrade python38-pytzUpgrade python38-markupsafe-debuginfoUpgrade python38-psycopg2-testsUpgrade python38-pyyamlUpgrade python2-idnaUpgrade python2-pluggyUpgrade python38-debuginfoUpgrade python2-chardetUpgrade python38-babelUpgrade python2-setuptools-wheelUpgrade python38-psutilUpgrade python2-debuginfoUpgrade python38-PyMySQLUpgrade python38-pipUpgrade python38-pyyaml-debuginfoUpgrade python-lxml-debugsourceUpgrade python38-CythonUpgrade python38-cffiUpgrade python2-wheelUpgrade python2-pytestUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-noseUpgrade python2-docutilsUpgrade python2-debugUpgrade python2-bsonUpgrade python38-sixUpgrade python38-pip-wheelUpgrade python38-scipyUpgrade python3-lxml-debuginfoUpgrade python2-ipaddressUpgrade python38-testUpgrade python38-markupsafeUpgrade python38-cryptographyUpgrade python2-toolsUpgrade python2-psycopg2-debugUpgrade python2-pip-wheelUpgrade python2-numpy-f2pyUpgrade python2-dnsUpgrade python2-backports-ssl_match_hostnameUpgrade python2-backportsUpgrade python-cryptography-debugsourceUpgrade python38-numpyUpgrade python2-rpm-macrosUpgrade python-pymongo-debugsourceUpgrade python2-libsUpgrade python38-urllib3Upgrade python38-idleUpgrade python2-pyyamlUpgrade python2-docs-infoUpgrade python2-Cython-debuginfoUpgrade python2-coverageUpgrade python2-bson-debuginfoUpgrade python2-babelUpgrade python-coverage-debugsourceUpgrade PyYAML-debugsourceUpgrade python2-CythonUpgrade python2-mockUpgrade python2-sixUpgrade python38-lxml-debuginfoUpgrade python2-numpyUpgrade python-cffi-debugsourceUpgrade python38-numpy-debuginfoUpgrade python38-lxmlUpgrade python2-jinja2Upgrade python-psycopg2-docUpgrade python2-pipUpgrade python38-pysocksUpgrade python2Upgrade python-pymongo-debuginfoUpgrade python2-attrsUpgrade python2-numpy-debuginfoUpgrade python38Upgrade python2-testUpgrade python2-lxml-debuginfoUpgrade python-nose-docsUpgrade python2-pyUpgrade python38-libsUpgrade python38-debugsourceUpgrade python38-chardetUpgrade python2-pytzUpgrade python2-pymongo-gridfsUpgrade python-psycopg2-debuginfo | Jun 1, 2021 | Dec 3, 2020 |
| Debian | — | Upgrade lxml | Nov 30, 2020 | Nov 30, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-lxml | Sep 16, 2021 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-lxml | Apr 30, 2021 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-lxml | Mar 24, 2021 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-lxmlUpgrade python3-lxmlUpgrade python-lxml | Feb 2, 2021 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-lxml | Jan 5, 2021 | Dec 3, 2020 |
| Oracle Solaris | — | Upgrade library/python/lxml-37 to version 4.6.2-11.4.31.0.1.88.2 on Solaris 11.4Upgrade library/python/lxml-27 to version 4.6.2-11.4.31.0.1.88.2 on Solaris 11.4Upgrade library/python/lxml to version 4.6.2-11.4.31.0.1.88.2 on Solaris 11.4Upgrade library/python/lxml-39 to version 4.6.2-11.4.31.0.1.88.2 on Solaris 11.4 | Mar 17, 2021 | Dec 3, 2020 |
| Oracle_linux | — | Upgrade python2-babelUpgrade python2-mockUpgrade python38-psutilUpgrade python38-plyUpgrade python38-libsUpgrade python38-cryptographyUpgrade python38-babelUpgrade python2-wheelUpgrade python2-pluggyUpgrade python2-numpy-f2pyUpgrade python-nose-docsUpgrade python38-markupsafeUpgrade python38-idnaUpgrade python2-urllib3Upgrade python2-libsUpgrade python2-chardetUpgrade python2-backports-ssl_match_hostnameUpgrade python-psycopg2-docUpgrade python38-numpy-f2pyUpgrade python2-sixUpgrade python38-psycopg2-docUpgrade python38-scipyUpgrade python2-pyyamlUpgrade python2-debugUpgrade python38-numpy-docUpgrade python38-cffiUpgrade python2-pipUpgrade python38-jinja2Upgrade python38-testUpgrade python2-wheel-wheelUpgrade python38-psycopg2-testsUpgrade python2-idnaUpgrade python38-pysocksUpgrade python2-noseUpgrade python38Upgrade python2-psycopg2Upgrade python38-pip-wheelUpgrade python2-rpm-macrosUpgrade python2-backportsUpgrade python38-setuptools-wheelUpgrade python38-numpyUpgrade python2-setuptools-wheelUpgrade python2-jinja2Upgrade python38-idleUpgrade python38-urllib3Upgrade python38-wheelUpgrade ol-automation-manager-cliUpgrade python2-pymongo-gridfsUpgrade python38-lxmlUpgrade python38-PyMySQLUpgrade python2-pysocksUpgrade python2-lxmlUpgrade python2-toolsUpgrade python38-develUpgrade python38-pyyamlUpgrade python2-scipyUpgrade python2-pytestUpgrade python38-sixUpgrade python2-pyUpgrade python2-pytzUpgrade python2-sqlalchemyUpgrade python38-mod_wsgiUpgrade python38-requestsUpgrade python38-setuptoolsUpgrade python2-virtualenvUpgrade python2-ipaddressUpgrade python2-funcsigsUpgrade python2-pip-wheelUpgrade python2-dnsUpgrade python-sqlalchemy-docUpgrade python2-PyMySQLUpgrade python38-psycopg2Upgrade python38-tkinterUpgrade python2-develUpgrade python3-lxmlUpgrade ol-automation-managerUpgrade python2-pytest-mockUpgrade python38-pytzUpgrade python2-setuptools_scmUpgrade python2-numpyUpgrade python2-psycopg2-testsUpgrade python2-CythonUpgrade python3-olamkitUpgrade python38-chardetUpgrade python38-wheel-wheelUpgrade babelUpgrade python2-docsUpgrade python2-testUpgrade python2-tkinterUpgrade python2-numpy-docUpgrade python38-asn1cryptoUpgrade python2-pygmentsUpgrade python38-rpm-macrosUpgrade python2Upgrade python2-pymongoUpgrade python38-pycparserUpgrade python38-debugUpgrade python38-CythonUpgrade python2-requestsUpgrade python2-attrsUpgrade python2-docutilsUpgrade python2-markupsafeUpgrade python2-docs-infoUpgrade python2-coverageUpgrade python2-setuptoolsUpgrade python2-bsonUpgrade python2-psycopg2-debugUpgrade python38-pip | May 26, 2021 | Oct 18, 2020 |
| Redhat_linux | — | Upgrade python2-sqlalchemyUpgrade babelUpgrade python2-psycopg2-testsUpgrade python2-debugsourceUpgrade python38-cryptographyUpgrade python38-requestsUpgrade python2-noseUpgrade python2-setuptools-wheelUpgrade python2-pymongoUpgrade python38-psycopg2-docUpgrade python-psycopg2-debugsourceUpgrade python2-docutilsUpgrade python38-scipy-debuginfoUpgrade python38-idleUpgrade python2-debugUpgrade python2-docsUpgrade python2-babelUpgrade python2-toolsUpgrade python2-idnaUpgrade python2-ipaddressUpgrade python2-rpm-macrosUpgrade python38-mod_wsgiUpgrade python3-lxmlUpgrade python38-pyyamlUpgrade python38-jinja2Upgrade python38-urllib3Upgrade python2-numpy-debuginfoUpgrade python38-cffi-debuginfoUpgrade python-psycopg2-debuginfoUpgrade python38-chardetUpgrade python38-wheel-wheelUpgrade python38-develUpgrade python38-lxmlUpgrade python2-pytest-mockUpgrade python38-tkinterUpgrade python2-Cython-debuginfoUpgrade python2-psycopg2No solution existsUpgrade python2-numpy-docUpgrade python38-pip-wheelUpgrade python2-dnsUpgrade python2-scipy-debuginfoUpgrade python2-tkinterUpgrade python2-lxml-debuginfoUpgrade python38-rpm-macrosUpgrade python38-psycopg2Upgrade scipy-debugsourceUpgrade python38-pysocksUpgrade Cython-debugsourceUpgrade python38-setuptoolsUpgrade python-cryptography-debugsourceUpgrade python2-setuptoolsUpgrade python2-bson-debuginfoUpgrade python2-funcsigsUpgrade python2-pyyamlUpgrade python-pymongo-debuginfoUpgrade python2-coverageUpgrade python-sqlalchemy-docUpgrade python-nose-docsUpgrade python2-backports-ssl_match_hostnameUpgrade python38-debugsourceUpgrade python38-psycopg2-debuginfoUpgrade python3-lxml-debuginfoUpgrade python38-psutil-debuginfoUpgrade python2-bsonUpgrade python2-mockUpgrade python2-pluggyUpgrade python2-PyMySQLUpgrade python-lxml-debugsourceUpgrade python38-plyUpgrade python2-lxmlUpgrade PyYAML-debugsourceUpgrade python38-numpy-f2pyUpgrade python2-wheelUpgrade python2-psycopg2-debuginfoUpgrade python2-debuginfoUpgrade python38-sixUpgrade python2-pyyaml-debuginfoUpgrade python38-testUpgrade python38-Cython-debuginfoUpgrade python38-libsUpgrade python38-CythonUpgrade python38-debugUpgrade python2-wheel-wheelUpgrade python38-numpy-debuginfoUpgrade python2-docs-infoUpgrade python38-markupsafe-debuginfoUpgrade python2-scipyUpgrade python-coverage-debugsourceUpgrade python38-wheelUpgrade python2-develUpgrade python2-jinja2Upgrade python2-pytzUpgrade python2-virtualenvUpgrade python2-pymongo-gridfsUpgrade python2Upgrade python2-pygmentsUpgrade python2-setuptools_scmUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-urllib3Upgrade python38-pyyaml-debuginfoUpgrade python38-pipUpgrade python38Upgrade numpy-debugsourceUpgrade python38-PyMySQLUpgrade python38-lxml-debuginfoUpgrade python2-pipUpgrade python-pymongo-debugsourceUpgrade python2-markupsafeUpgrade python2-chardetUpgrade python2-pyUpgrade python38-asn1cryptoUpgrade python38-setuptools-wheelUpgrade python-psutil-debugsourceUpgrade python2-coverage-debuginfoUpgrade python2-numpyUpgrade python38-psycopg2-testsUpgrade python2-psycopg2-debugUpgrade python38-numpyUpgrade python2-CythonUpgrade python2-attrsUpgrade python38-numpy-docUpgrade python-psycopg2-docUpgrade python38-babelUpgrade python38-pytzUpgrade python38-markupsafeUpgrade python38-pycparserUpgrade python2-numpy-f2pyUpgrade python38-cffiUpgrade python2-testUpgrade python2-backportsUpgrade python2-pysocksUpgrade python-markupsafe-debugsourceUpgrade python38-cryptography-debuginfoUpgrade python2-pytestUpgrade python2-pip-wheelUpgrade python38-debuginfoUpgrade python2-libsUpgrade python38-psutilUpgrade python38-idnaUpgrade python2-pymongo-debuginfoUpgrade python2-requestsUpgrade python-cffi-debugsourceUpgrade python2-sixUpgrade python38-scipy | May 21, 2021 | Dec 3, 2020 |
| Rocky_linux | — | Upgrade python38Upgrade python38-debuginfoUpgrade numpy-debugsourceUpgrade python2Upgrade python2-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade python38-pyyaml-debuginfoUpgrade python2-pymongo-gridfsUpgrade python-psutil-debugsourceUpgrade python38-lxml-debuginfoUpgrade python38-numpy-debuginfoUpgrade python38-scipyUpgrade python38-CythonUpgrade python38-scipy-debuginfoUpgrade python2-bsonUpgrade python38-debugUpgrade python38-pyyamlUpgrade python-cffi-debugsourceUpgrade python2-testUpgrade python2-numpy-f2pyUpgrade python2-CythonUpgrade python-pymongo-debugsourceUpgrade python2-coverage-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-lxml-debuginfoUpgrade python-cryptography-debugsourceUpgrade python2-numpyUpgrade python38-debugsourceUpgrade python38-Cython-debuginfoUpgrade python2-libsUpgrade python2-Cython-debuginfoUpgrade python2-debuginfoUpgrade python3-lxml-debuginfoUpgrade python38-psycopg2-testsUpgrade python2-markupsafeUpgrade PyYAML-debugsourceUpgrade python2-psycopg2-debugUpgrade python2-backportsUpgrade python-psycopg2-docUpgrade python38-markupsafeUpgrade python-coverage-debugsourceUpgrade python3-lxmlUpgrade python-lxml-debugsourceUpgrade python2-pyyaml-debuginfoUpgrade python2-sqlalchemyUpgrade scipy-debugsourceUpgrade python38-testUpgrade python38-cryptography-debuginfoUpgrade python38-mod_wsgiUpgrade python38-cryptographyUpgrade python2-pyyamlUpgrade python38-numpyUpgrade python2-scipy-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python-markupsafe-debugsourceUpgrade python2-pymongo-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python38-psutilUpgrade python2-debugUpgrade python38-psycopg2-docUpgrade python38-numpy-f2pyUpgrade python38-lxmlUpgrade python38-cffiUpgrade python2-tkinterUpgrade python2-psycopg2Upgrade python38-psycopg2-debuginfoUpgrade python38-psycopg2Upgrade python38-develUpgrade python2-numpy-debuginfoUpgrade python2-coverageUpgrade python38-cffi-debuginfoUpgrade python2-toolsUpgrade python38-idleUpgrade python38-libsUpgrade python2-lxmlUpgrade python2-bson-debuginfoUpgrade python38-tkinterUpgrade python38-psutil-debuginfoUpgrade python-pymongo-debuginfoUpgrade python2-pymongoUpgrade Cython-debugsourceUpgrade python2-develUpgrade python38-markupsafe-debuginfoUpgrade python2-scipyUpgrade python-psycopg2-debuginfo | Mar 12, 2024 | Dec 3, 2020 |
| Suse | — | Upgrade python-lxmlUpgrade python3-lxmlUpgrade python2-lxml-develUpgrade python2-lxmlUpgrade python3-lxml-devel | Mar 12, 2022 | Dec 3, 2020 |
| Ubuntu | — | Upgrade python-lxml (Ubuntu Pro)Upgrade python-lxmlUpgrade python3-lxml (Ubuntu Pro)Upgrade python3-lxml | Dec 10, 2020 | Dec 3, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 3, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub