lxml vulnerabilities
4 published CVEs name lxml among the affected products.
- 4Published CVEs4 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-49825
lxml: javascript: URL bypass in Cleaner via xlink:href
lxml · lxml
High8.2 - CVE-2026-41066
lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files
lxml · lxml
High7.5 - CVE-2022-2309
NULL Pointer Dereference in lxml/lxml
lxml · lxml/lxml
Medium5.3 - CVE-2021-43818
HTML Cleaner allows crafted and SVG embedded scripts to pass through
lxml · lxml
High8.2