https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:13:38.515347+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:1763 ALSA-2022:1763 — Moderate: python39:3.9 and python39-devel:3.9 security update 2026-10-03T19:13:39.536832+00:00

Affected: AlmaLinux:8: python39, AlmaLinux:8: python39-Cython, AlmaLinux:8: python39-PyMySQL, AlmaLinux:8: python39-attrs, AlmaLinux:8: python39-cffi, AlmaLinux:8: python39-chardet, AlmaLinux:8: python39-cryptography, AlmaLinux:8: python39-debug, AlmaLinux:8: python39-devel, AlmaLinux:8: python39-idle and 39 more

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-00756 bdu:2022-00756 2026-10-03T19:13:39.536971+00:00 bdu:2022-00756 https://cve.radiocsirt.org/vuln/bell-cve-2021-43818 Withdrawn: BELL-CVE-2021-43818 — CVE-2021-43818 does not affect BellSoft software 2026-10-03T19:13:39.536990+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/brew-ansible-cve-2021-43818 BREW-ansible-CVE-2021-43818 — lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through 2026-10-03T19:13:39.537006+00:00

Affected: Homebrew: ansible

### Impact The HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs.

Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5.

### Patches The issue has been resolved in lxml 4.6.5.

### Workarounds None.

### References The issues are tracked under the report IDs GHSL-2021-1037 and GHSL-2021-1038.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0262 certfr-2024-avi-0262 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-03T19:13:39.537033+00:00 certfr-2024-avi-0262 https://cve.radiocsirt.org/vuln/cnvd-2021-100235 cnvd-2021-100235 2026-10-03T19:13:39.537050+00:00 cnvd-2021-100235 https://cve.radiocsirt.org/vuln/euvd-2026-263982 EUVD-2026-263982 2026-10-03T19:13:39.537062+00:00 EUVD-2026-263982 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43818 fkie_cve-2021-43818 2026-10-03T19:13:39.537072+00:00

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available.

 https://cve.radiocsirt.org/vuln/ghsa-55x5-fj6c-h6m8 GHSA-55x5-fj6c-h6m8 — lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through 2026-10-03T19:13:39.537094+00:00

Affected: PyPI: lxml

### Impact The HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs.

Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5.

### Patches The issue has been resolved in lxml 4.6.5.

### Workarounds None.

### References The issues are tracked under the report IDs GHSL-2021-1037 and GHSL-2021-1038.

 https://cve.radiocsirt.org/vuln/gsd-2021-43818 gsd-2021-43818 2026-10-03T19:13:39.537118+00:00 gsd-2021-43818 https://cve.radiocsirt.org/vuln/msrc_cve-2021-43818 msrc_CVE-2021-43818 — HTML Cleaner allows crafted and SVG embedded scripts to pass through 2026-10-03T19:13:39.537129+00:00 msrc_CVE-2021-43818 https://cve.radiocsirt.org/vuln/oesa-2022-1482 OESA-2022-1482 — python-lxml security update 2026-10-03T19:13:39.537145+00:00

Affected: openEuler:20.03-LTS-SP1: python-lxml, openEuler:20.03-LTS-SP2: python-lxml, openEuler:20.03-LTS-SP3: python-lxml

XML processing library combining libxml2/libxslt with the ElementTree API. Security Fix(es): lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available.(CVE-2021-43818)

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0803-1 openSUSE-SU-2022:0803-1 — Security update for python-lxml 2026-10-03T19:13:39.537171+00:00

Security update for python-lxml

 https://cve.radiocsirt.org/vuln/pysec-2021-852 PYSEC-2021-852 2026-10-03T19:13:39.537189+00:00

Affected: PyPI: lxml

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available.

 https://cve.radiocsirt.org/vuln/rhsa-2022:1664 RHSA-2022:1664 — Red Hat Security Advisory: Red Hat Software Collections security update 2026-10-03T19:13:39.537209+00:00

python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through

 https://cve.radiocsirt.org/vuln/suse-su-2022:0803-1 SUSE-SU-2022:0803-1 — Security update for python-lxml 2026-10-03T19:13:39.537225+00:00

Security update for python-lxml

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-43818 UBUNTU-CVE-2021-43818 2026-10-03T19:13:39.537242+00:00

Affected: Ubuntu:Pro:14.04:LTS: lxml, Ubuntu:Pro:16.04:LTS: lxml, Ubuntu:18.04:LTS: lxml, Ubuntu:20.04:LTS: lxml, Ubuntu:22.04:LTS: lxml

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator… 2026-10-03T19:13:39.537267+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.