https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 16:59:48 +0000 https://vulnerability.circl.lu/vuln/ubuntu-cve-2018-19787 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lxml, Ubuntu:16.04:LTS: lxml, Ubuntu:18.04:LTS: lxml</p> <p>An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by &#34;j a v a s c r i p t:&#34; in Internet Explorer. This is a similar issue to CVE-2014-3146.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lxml, Ubuntu:16.04:LTS: lxml, Ubuntu:18.04:LTS: lxml</p> <p>An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by &#34;j a v a s c r i p t:&#34; in Internet Explorer. This is a similar issue to CVE-2014-3146.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2018-19787