lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the defau

NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lxml is used

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets c

An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and fo

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caus

An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs th

Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-sit