Vulnetix
Try Vulnetix Request Demo
CVE-2020-6817 PUBLISHED

bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable to ReDoS. For example, bleach.clean(..., attributes={'a': ['style']}).

EPSS 0.58% · 68.7th percentile

Risk Scores

EPSS Score
0.58%
68.7th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSpython-bleach0, 2.0-1, 2.1.2-1
Ubuntu:16.04:LTSpython-bleach0, 1.4-1, 1.4.2-1
Ubuntu:20.04:LTSpython-bleach0, 3.1.0-1, 3.1.0-2

Timeline

References

Open in Interactive Console →