Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
py3-lxml
py3-lxml vulnerabilities (Alpaquita)
2 vulnerabilities.
py3-lxml
Alpaquita
lxml: javascript: URL bypass in Cleaner via xlink:href
CVE-2026-49825
Fix available
8.2
High
June 29, 2026
py3-lxml
Alpaquita
lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files
CVE-2026-41066
Fix available
7.5
High
April 21, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open