GCVE-VVD-MAGEIA-2021-260 — Vulnetix

GCVE-VVD-MAGEIA-2021-260

Advisory Published

Vulnetix · Advisory published June 16, 2021

It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleach.clean when "svg" or "math" are in the allowed tags, 'p' or "br" are in allowed tags, "style", "title", "noscript", "script", "textarea", "noframes", "iframe", or "xmp" are in allowed tags and 'strip_comments=False' is set (CVE-2021-23980).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	python-bleach	0 (affected), 3.1.4-1.1.mga7 (unaffected)	—
Mageia	python-bleach	0 (affected), 3.3.0-1.mga8 (unaffected)	—

Aliases

Transitive aliases

GHSA-vv2x-vrpj-qqpq EUVD-2021-0036 BDU:2021-03144 VVD-CISA-2021-23980

References

Updated python-bleach packages fix a security vulnerability

advisory

Updated python-bleach packages fix a security vulnerability

issue

Updated python-bleach packages fix a security vulnerability

issue

Updated python-bleach packages fix a security vulnerability

issue

Updated python-bleach packages fix a security vulnerability

advisory

Browse GCVE Records

74,947 records in the GCVE database · Updated July 28, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON

$ Console Community · 100/wk Open console ›