PYSEC-2021-849

vendorUSosv

view advisory published 2021-10-18Licence: CC-BY-4.0

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-42576US	critical9.8	1.56% (75th)	—	2021-10-18
The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION eleme…

references

External citations — patches, advisories, analysis.

https://docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/WEB
https://github.com/advisories/GHSA-x95h-979x-cf3jADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2021-42576ADVISORY
https://pypi.org/project/pybluemondayPACKAGE

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan