What’s Vulnerable › Products

fedora-python lxml_html_clean vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your fedora-python lxml_html_clean version is affected

Latest fedora-python lxml_html_clean vulnerabilities

• CVE-2026-49825 — lxml: javascript: URL bypass in Cleaner via xlink:href (CVSS 8.2)
• CVE-2026-28350 — lxml_html_clean: <base> tag injection through default Cleaner configuration (CVSS 6.1)
• CVE-2026-28348 — lxml_html_clean: CSS @import Filter Bypass via Unicode Escapes (CVSS 6.1)
• CVE-2024-52595 — HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through (CVSS 6.1)