Approved changes feed: RSS · Atom

cpe:2.3:a:python:pybluemonday:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPython (b57ad93a-6195-5192-9423-6cfad6044a8b)
ProductPybluemonday (47a82248-b54e-5749-ae6b-fdf7aff4f723)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/coldheat/pybluemonday purl2cpe 2026-06-01 10:16:28.291883
pkg:pypi/pybluemonday purl2cpe 2026-06-01 10:16:28.291886

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-42576 vulnerable 2026-06-03 14:45:27.318931 Details available
The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
Published: 2021-10-18T14:36:43.000Z
Updated: 2024-08-04T03:38:49.289Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.