Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

Debian DSA-4892-1 Critical: Mutation XSS in Python-Bleach

debian
Calendar Grey April 18, 2021
Debian Logo
Debian Security Advisory DSA-4903-1 highlights a reflected XSS vulnerability in flask-cors's handling of cross-origin requests.
It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleach.clean when 'svg' or 'math' are in the allowed tags...
Topics%20covered

Topics Covered

security advisory critical debian xss python mutation xss python bleach html sanitization

Summary

For the stable distribution (buster), this problem has been fixed in
version 3.1.2-0+deb10u2.

We recommend that you upgrade your python-bleach packages.

For the detailed security status of python-bleach please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/source-package/python-bleach

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: python-bleach
CVE ID: CVE-2021-23980

Topics%20covered

Topics Covered

security advisory critical debian xss python mutation xss python bleach html sanitization

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here