Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
David Kitchen bluemonday 安全漏洞
Vulnerability Description
David Kitchen bluemonday是 David Kitchen开源的一个应用程序。用于在Go中实现的HTML清理程序。 bluemonday sanitizer 存在安全漏洞,该漏洞源于Go中1.0.16之前的bluemonday和Python中 0.0.8之前的bluemonday(在pybluemonday中),不能正确地强制与SELECT、STYLE和OPTION元素关联的策略。
CVSS Information
N/A
Vulnerability Type
N/A