Login Request a demo
BL
Product
Bleach
by Mozilla · last CVE Feb 16, 2023
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 1Medium 3Low 0
Severity
All severities5Critical1High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Bleach to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-23980
6.1
0%
Feb 16
A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe,…
Affected: before 3.3.0
CVE-2020-6816
6.1
1%
Mar 24
In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False
Affected: before 3.1.2
CVE-2020-6802
6.1
2%
Mar 24
In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option
Affected: before 3.1.1
Showing 3