Mozilla Mozilla Bleach
2 CVEs affecting Mozilla Mozilla Bleach. Latest disclosed: 2023-02-16. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-6817 | High | 7.5 | 2023-02-16 | bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with a… |
CVE-2021-23980 | Medium | 6.1 | 2023-02-16 | A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea… |