lxml vulnerabilities (PyPI)

7 vulnerabilities.

• lxml PyPI lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files CVE-2026-41066 Fix available 7.5 HighApril 21, 2026
• lxml PyPI NULL Pointer Dereference in lxml/lxml CVE-2022-2309 Fix available 5.3 MediumJuly 5, 2022
• lxml PyPI HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Fix available 8.2 HighDecember 13, 2021
• lxml PyPI lxml vulnerable to Cross-Site Scripting CVE-2021-28957 Fix available 6.1 MediumMarch 21, 2021
• lxml PyPI lxml vulnerable to Cross-site Scripting CVE-2020-27783 Fix available 6.1 MediumNovember 26, 2020
• lxml PyPI Improper Neutralization of Input During Web Page Generation in LXML CVE-2018-19787 Fix available 6.1 MediumDecember 2, 2018
• lxml PyPI lxml Cross-site Scripting Via Control Characters CVE-2014-3146 Public exploitFix available 4.3 MediumMay 14, 2014