← Database

CVE-2021-42576

CRITICAL CVSS: 9.8 Published: 2021-10-18 Modified: 2026-06-17

Description

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

Affected Platforms

Microco BluemondayPython Pybluemonday

Weakness Type

NVD-CWE-Other

References