Vendor

    Fedora-python

    4 known vulnerabilities in products by Fedora-python, 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Fedora-python
    HighCVE-2026-49825

    lxml: javascript: URL bypass in Cleaner via xlink:href

    also in 5 other products

    		8.2
    HighCVE-2024-52595

    HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through

    also in 1 other product

    		7.7
    MediumCVE-2026-28350

    lxml_html_clean: <base> tag injection through default Cleaner configuration

    also in 2 other products

    		6.1
    MediumCVE-2026-28348

    lxml_html_clean: CSS @import Filter Bypass via Unicode Escapes

    also in 2 other products

    		6.1

    Products

    Products by Fedora-python
    Lxml Html Clean40