Mozilla Bleach (Mozilla) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-02-16. Vendor: Mozilla.

CVEs of Mozilla Bleach

• CVE-2021-23980 - CVSS 6.1 (medium), 2023-02-16: A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script,…
• CVE-2020-6817 - CVSS 7.5 (high), 2023-02-16: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with…