VDB

GCVE-110-MAGEIA-2020-176

GCVE-110-MAGEIA-2020-176
Advisory Published
Vulnetix · Advisory published April 20, 2020
In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False. (CVE-2020-6816) Regular expression denial of service. (CVE-2020-6817)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageianvidia3900 (affected), 390.138-1.mga7.nonfree (unaffected)—
Mageiapython-bleach0 (affected), 3.1.4-1.mga7 (unaffected), 0 (affected), 3.1.4-1.mga7 (unaffected)—

Aliases

CVE-2020-6816CVE-2020-6817

References

Updated python-bleach packages fix security vulnerability
advisory
Updated python-bleach packages fix security vulnerability
advisory
Updated python-bleach packages fix security vulnerability
advisory
Updated python-bleach packages fix security vulnerability
issue
Updated python-bleach packages fix security vulnerability
issue
Updated nvidia390 packages fix kernel 5.7 support
advisory
Updated nvidia390 packages fix kernel 5.7 support
issue

Browse GCVE Records

72,148 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›