Lucene search
Veracode Vulnerability DatabaseVERACODE:22839HistoryMar 31, 2020 - 6:36 a.m.
Regular Expression Denial-of-Service (ReDoS)
2020-03-3106:36:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
29.7%
bleach is vulnerable to regular expression denial of service (ReDoS). The vulnerability exists when parsing style attributes through sanitize_css.
Related
github
github
regular expression denial-of-service (ReDoS) in Bleach
2020-03-30 19:45:56
nessus
nessus
FreeBSD : py-bleach -- regular expression denial-of-service (4c52ec3c-86f3-11ea-b5b4-641c67a117d8)
2020-04-27 00:00:00
Debian DLA-2167-1 : python-bleach security update
2020-04-02 00:00:00
Fedora 30 : python-bleach (2020-827b677e15)
2020-04-30 00:00:00
osv
osv
regular expression denial-of-service (ReDoS) in Bleach
2020-03-30 19:45:56
CVE-2020-6817
2023-02-16 22:15:10
PYSEC-2020-340
2020-03-30 19:45:00
cve
cve
CVE-2020-6817
2023-02-16 22:15:10
debian
debian
[SECURITY] [DLA 2167-1] python-bleach security update
2020-04-01 17:53:31
freebsd
freebsd
py-bleach -- regular expression denial-of-service
2019-03-09 00:00:00
prion
prion
Cross site scripting
2023-02-16 22:15:00
nvd
nvd
CVE-2020-6817
2023-02-16 22:15:10
openvas
openvas
Debian: Security Advisory (DLA-2167-1)
2020-04-02 00:00:00
Fedora: Security Advisory for python-bleach (FEDORA-2020-827b677e15)
2020-04-30 00:00:00
Fedora: Security Advisory for python-bleach (FEDORA-2020-e9c8bdd1e3)
2020-05-02 00:00:00
debiancve
debiancve
CVE-2020-6817
2023-02-16 22:15:10
ubuntucve
ubuntucve
CVE-2020-6817
2023-02-16 00:00:00
redhatcve
redhatcve
CVE-2020-6817
2022-05-21 00:05:30
cvelist
cvelist
CVE-2020-6817
2023-02-16 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: python-bleach-3.1.4-2.fc32
2020-05-01 04:07:36
[SECURITY] Fedora 31 Update: python-bleach-3.1.4-2.fc31
2020-04-30 03:44:15
[SECURITY] Fedora 30 Update: python-bleach-3.1.4-2.fc30
2020-04-30 02:51:57
mageia
mageia
Updated python-bleach packages fix security vulnerability
2020-04-20 17:02:32
suse
suse
Security update for python-bleach (important)
2021-04-14 00:00:00
Security update for python-bleach (important)
2021-04-18 00:00:00