—
PYSEC-2018-51
상세
An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
PyPI / bleach
최초 영향 버전:
0 수정 버전: c5df5789ec3471a31311f42c2d19fc2cf21b35ef 수정
pip install --upgrade 'bleach>=c5df5789ec3471a31311f42c2d19fc2cf21b35ef'