bleach vulnerabilities (PyPI)
8 vulnerabilities.
-
bleachPyPI Bleach clean() / Cleaner() fails to sanitize dangerous URI schemes in allowed formaction attributes 6.1 Medium -
bleachPyPI Bleach linkify(parse_email=True) CPU exhaustion via unbounded email regex scanning 4.3 Medium -
bleachPyPI Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output 0.0 None -
bleachPyPI Cross-site scripting in Bleach 6.1 Medium -
bleachPyPI regular expression denial-of-service (ReDoS) in Bleach 7.5 High -
bleachPyPI Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag 6.1 Medium -
bleachPyPI XSS in Bleach when noscript and raw tag whitelisted 6.1 Medium -
bleachPyPI Bleach URI Scheme Restriction Bypass 9.8 Critical