Vulnerabilities in lxml

4 results

CVE-2021-43818HIGHHTML Cleaner allows crafted and SVG embedded scripts to pass throughEPSS 2.7%CVE-2022-2309MEDIUMNULL Pointer Dereference in lxml/lxmlEPSS 2.4%CVE-2026-41066HIGHlxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local filesEPSS 0.3%CVE-2026-49825HIGHlxml: javascript: URL bypass in Cleaner via xlink:hrefEPSS 0.3%