Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Debian LTS DLA-2467-1: Critical XSS Injection in lxml Detected

debian lts
Calendar Grey November 26, 2020
Dist Debian Esm H88
Ubuntu Security Notice USN-4459-1 highlights vulnerabilities in lxml. It is advisable to perform an upgrade to safeguard against potential exploits.
CVE-2018-19787 It was discovered that there was a XSS injection vulnerability in

Summary

CVE-2018-19787

It was discovered that there was a XSS injection vulnerability in
the LXML HTML/XSS manipulation library for Python.

CVE-2020-27783

javascript escaping through the


Severity
critical
Lowest
Low
Medium
High
Critical

Package: lxml
Version: 3.7.1-1+deb9u1
CVE ID: CVE-2018-19787 CVE-2020-27783

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here