FLAT-HCZKL – Vulnerability | Fluid Attacks Database

Database

Description

cross-site scripting

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
pypi	html5lib	>=0 <0.99999999	0.99999999
debian 14	html5lib	>=0 <0.999999999-1	0.999999999-1
debian 12	html5lib	>=0 <0.999999999-1	0.999999999-1
debian 13	html5lib	>=0 <0.999999999-1	0.999999999-1
debian 11	html5lib	>=0 <0.999999999-1	0.999999999-1
alpm rolling_release	python-html5lib	>=0.9999999-2 <0.999999999-1	0.999999999-1

Aliases

1. CVE-2016-99102. NVD-2016-99103. OSV-2016-99104. OSV-DEBIAN-2016-99105. GHSA-8f6m-gfq9-g33v6. GCVE-2016-99107. SECURITY-TRACKER-CVE-2016-9910

References

1. https://github.com/html5lib/html5lib-python/issues/112. https://github.com/html5lib/html5lib-python/issues/123. https://github.com/html5lib/html5lib-python/commit/9b8d8eb5afbc066b7fac9390f5ec75e5e8a7cab74. https://github.com/pypa/advisory-database/tree/main/vulns/html5lib/PYSEC-2017-15.yaml5. https://html5lib.readthedocs.io/en/latest/changes.html#b96. https://web.archive.org/web/20200514233128/http://www.securityfocus.com/bid/951327. http://www.openwall.com/lists/oss-security/2016/12/06/58. http://www.openwall.com/lists/oss-security/2016/12/08/8

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-HCZKL – Vulnerability | Fluid Attacks Database