lxml_html_clean vulnerabilities

1 known vulnerability in lxml_html_clean from Fedora-python. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  lxml: Improper Neutralization of Input During Web Page Generation

  CVE-2026-49825Aug 20, 2026Lxml

  lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in ``lxml.html.defs.link_attrs`` were missing ``xlink:href``, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability