LX
Vendor
lxml
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-49825 | LX lxml lxml | 8.2 | Aug 20 | lxml: javascript: URL bypass in Cleaner via xlink:href |
| CVE-2026-41066 | LX lxml lxml | 7.5 | Apr 24 | lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files |
| CVE-2022-2309 | LX Lxml Lxml | 7.5 | Jul 5 | NULL Pointer Dereference allows attackers to cause a denial of service (or application crash) |
| CVE-2021-43818 | LX Lxml Lxml | 7.1 | Dec 13 | lxml is a library for processing XML and HTML in the Python language |
| CVE-2021-28957 | LX Lxml Lxml | 6.1 | Mar 21 | An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3 |
| CVE-2020-27783 | LX Lxml Lxml | 6.1 | Dec 3 | A XSS vulnerability was discovered in python-lxml's clean module |
| CVE-2018-19787 | LX Lxml Lxml | 6.1 | Dec 2 | An issue was discovered in lxml before 4.2.5 |
| CVE-2014-3146 | LX Lxml Lxml | 6.1 | May 14 | Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters… |