LX
Product
lxml_html_clean
by fedora-python · last CVE Aug 20, 2026
3
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch

Add lxml_html_clean to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-49825
8.2
0%
Aug 20
lxml: javascript: URL bypass in Cleaner via xlink:href
Affected: < 0.4.5
CVE-2026-28350
6.1
0%
Mar 5
lxml_html_clean: <base> tag injection through default Cleaner configuration
Affected: < 0.4.4
CVE-2026-28348
6.1
0%
Mar 5
lxml_html_clean: CSS @import Filter Bypass via Unicode Escapes
Affected: < 0.4.4
Showing 3