← Back

Microco

microco

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Bluemonday
bluemonday
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-42576
2Microco
Python
2Bluemonday
Pybluemonday
Jun 17, 2026
Oct 18, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
CVE-2021-29272
1Microco
1Bluemonday
Jun 17, 2026
Mar 27, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a protection mechanism against the "script" string.