漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
lxml_html_clean: <base> tag injection through default Cleaner configuration
Vulnerability Description
lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.4, the <base> tag passes through the default Cleaner configuration. While page_structure=True removes html, head, and title tags, there is no specific handling for <base>, allowing an attacker to inject it and hijack relative links on the page. This issue has been patched in version 0.4.4.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
对输出编码和转义不恰当
Vulnerability Title
lxml_html_clean 安全漏洞
Vulnerability Description
lxml_html_clean是Fedora Python SIG开源的一个从 lxml.HTML.clean 复制的 HTML 清理功能的单独项目。 lxml_html_clean 0.4.4之前版本存在安全漏洞，该漏洞源于base标签通过默认Cleaner配置，可能导致攻击者注入该标签并劫持页面上的相对链接。
CVSS Information
N/A
Vulnerability Type
N/A