CVE-2021-42576

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p74

Published

Oct 18, 2021 (Oct 18, 2021)

Modified

Jun 17, 2026

Description

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

Vendors: microco python
Products: bluemonday, pybluemonday
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.