The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in ``lxml.html.defs.link_attrs`` were missing ``xlink:href``, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxml_html_clean 0.4.5.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-lxmlUpgrade python3.12-lxml | Oct 11, 2026 | Sep 9, 2026 |
| Debian | — | Upgrade lxml | Sep 30, 2026 | Aug 20, 2026 |
| Redhat_linux | — | Upgrade python3.12-lxmlUpgrade python3-lxmlNo solution existsUpgrade python3.12-lxml-debugsourceUpgrade python3-lxml-debuginfoUpgrade python-lxml-debugsourceUpgrade python3.12-lxml-debuginfo | Aug 31, 2026 | Aug 20, 2026 |
| Rocky_linux | — | Upgrade python3.12-lxml-debugsourceUpgrade python-lxml-debugsourceUpgrade python3.12-lxml-debuginfoUpgrade python3.12-lxmlUpgrade python3-lxml-debuginfoUpgrade python3-lxml | Sep 15, 2026 | Sep 11, 2026 |
| Ubuntu | — | Upgrade python3-lxmlUpgrade python3-lxml (Ubuntu Pro)Upgrade python-lxml (Ubuntu Pro) | Oct 12, 2026 | Oct 7, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub