https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 23:51:44 +0000 https://db.gcve.eu/vuln/fkie_cve-2024-34078 <p>html-sanitizer is an allowlist-based HTML cleaner. If using `keep_typographic_whitespace=False` (which is the default), the sanitizer normalizes unicode to the NFKC form at the end. Some unicode characters normalize to chevrons; this allows specially crafted HTML to escape sanitization. The problem has been fixed in 2.4.2.</p> <p>html-sanitizer is an allowlist-based HTML cleaner. If using `keep_typographic_whitespace=False` (which is the default), the sanitizer normalizes unicode to the NFKC form at the end. Some unicode characters normalize to chevrons; this allows specially crafted HTML to escape sanitization. The problem has been fixed in 2.4.2.</p> https://db.gcve.eu/vuln/fkie_cve-2024-34078 https://db.gcve.eu/vuln/ghsa-wvhx-q427-fgh3 <p><strong>Affected:</strong> PyPI: html-sanitizer</p> <p>### Impact</p> <p>If using `keep_typographic_whitespace=False` (which is the default), the sanitizer normalizes unicode to the NFKC form at the end. Some unicode characters normalize to chevrons; this allows specially crafted HTML to escape sanitization.</p> <p>### Patches</p> <p>The problem has been fixed in 2.4.2.</p> <p>### Workarounds</p> <p>Set `keep_typographic_whitespace=True` explicitly, or normalize to NFKC yourself earlier.</p> <p><strong>Affected:</strong> PyPI: html-sanitizer</p> <p>### Impact</p> <p>If using `keep_typographic_whitespace=False` (which is the default), the sanitizer normalizes unicode to the NFKC form at the end. Some unicode characters normalize to chevrons; this allows specially crafted HTML to escape sanitization.</p> <p>### Patches</p> <p>The problem has been fixed in 2.4.2.</p> <p>### Workarounds</p> <p>Set `keep_typographic_whitespace=True` explicitly, or normalize to NFKC yourself earlier.</p> https://db.gcve.eu/vuln/ghsa-wvhx-q427-fgh3 https://db.gcve.eu/vuln/pysec-2026-1455 <p><strong>Affected:</strong> PyPI: html-sanitizer</p> <p>### Impact</p> <p>If using `keep_typographic_whitespace=False` (which is the default), the sanitizer normalizes unicode to the NFKC form at the end. Some unicode characters normalize to chevrons; this allows specially crafted HTML to escape sanitization.</p> <p>### Patches</p> <p>The problem has been fixed in 2.4.2.</p> <p>### Workarounds</p> <p>Set `keep_typographic_whitespace=True` explicitly, or normalize to NFKC yourself earlier.</p> <p><strong>Affected:</strong> PyPI: html-sanitizer</p> <p>### Impact</p> <p>If using `keep_typographic_whitespace=False` (which is the default), the sanitizer normalizes unicode to the NFKC form at the end. Some unicode characters normalize to chevrons; this allows specially crafted HTML to escape sanitization.</p> <p>### Patches</p> <p>The problem has been fixed in 2.4.2.</p> <p>### Workarounds</p> <p>Set `keep_typographic_whitespace=True` explicitly, or normalize to NFKC yourself earlier.</p> https://db.gcve.eu/vuln/pysec-2026-1455 https://db.gcve.eu/vuln/ubuntu-cve-2024-34078 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: python-html-sanitizer, Ubuntu:24.04:LTS: python-html-sanitizer</p> <p>html-sanitizer is an allowlist-based HTML cleaner. If using `keep_typographic_whitespace=False` (which is the default), the sanitizer normalizes unicode to the NFKC form at the end. Some unicode characters normalize to chevrons; this allows specially crafted HTML to escape sanitization. The problem has been fixed in 2.4.2.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: python-html-sanitizer, Ubuntu:24.04:LTS: python-html-sanitizer</p> <p>html-sanitizer is an allowlist-based HTML cleaner. If using `keep_typographic_whitespace=False` (which is the default), the sanitizer normalizes unicode to the NFKC form at the end. Some unicode characters normalize to chevrons; this allows specially crafted HTML to escape sanitization. The problem has been fixed in 2.4.2.</p> https://db.gcve.eu/vuln/ubuntu-cve-2024-34078