The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable to ReDoS. For example, bleach.clean(..., attributes={'a': ['style']}).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade python-bleach | Apr 3, 2020 | Apr 3, 2020 |
| Freebsd | — | Upgrade py27-bleachUpgrade py35-bleachUpgrade py38-bleachUpgrade py36-bleachUpgrade py37-bleach | Apr 27, 2020 | Apr 26, 2020 |
| Suse | — | Upgrade python3-bleachUpgrade python2-bleach | Apr 15, 2021 | Mar 9, 2019 |
| Ubuntu | — | Upgrade python-bleach-doc (Ubuntu Pro)Upgrade python-bleach (Ubuntu Pro)Upgrade python3-bleach (Ubuntu Pro) | Jun 26, 2025 | Feb 16, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub