Skip to content
Llxml
Products
| Product | CVEs | Exploited | Latest |
|---|
| lxml | 3 | – | Aug 20, 2026 |
| lxml/lxml | 1 | – | Jul 5, 2022 |
Exploited and recent CVEs
-
CVE-2026-49825
High 8.2
lxml: javascript: URL bypass in Cleaner via xlink:href
0.3%
-
CVE-2026-41066
High 7.5
lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files
0.3%
-
CVE-2022-2309
Medium 5.3
NULL Pointer Dereference in lxml/lxml
2.4%
-
CVE-2021-43818
High 8.2
HTML Cleaner allows crafted and SVG embedded scripts to pass through
2.7%