Skip to content
Lxml vulnerabilities
Newest
-
lxml, fedora-python lxml html clean +1 more
lxml: javascript: URL bypass in Cleaner via xlink:href
CVE-2026-49825
Fix available
8.2 High
-
lxml
lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files
CVE-2026-41066
Fix available
7.5 High
-
dnkorpushov ebookmeta, lxml +1 more
ebookmeta XML External Entity vulnerability
CVE-2024-37388
Fix available
9.1 Critical
-
lxml, lxml lxml/lxml, fedoraproject fedora +2 more
NULL Pointer Dereference in lxml/lxml
CVE-2022-2309
Fix available
5.3 Medium
-
lxml, debian linux, fedoraproject fedora +8 more +10 more
HTML Cleaner allows crafted and SVG embedded scripts to pass through
CVE-2021-43818
Fix available
8.2 High
-
lxml, debian linux, fedoraproject fedora +2 more +4 more
lxml vulnerable to Cross-Site Scripting
CVE-2021-28957
Fix available
6.1 Medium
-
lxml, debian linux, fedoraproject fedora +5 more +7 more
lxml vulnerable to Cross-site Scripting
CVE-2020-27783
Fix available
6.1 Medium
-
lxml, canonical ubuntu linux, debian linux +2 more
Improper Neutralization of Input During Web Page Generation in LXML
CVE-2018-19787
Fix available
6.1 Medium
-
lxml
lxml Cross-site Scripting Via Control Characters
CVE-2014-3146
Public exploitFix available
4.3 Medium