[Git][security-tracker-team/security-tracker][master] CVE-2026-28348/lxml-html-clean: Reference follow-up commits

Guilhem Moulin (@guilhem) guilhem at debian.org
Mon Sep 28 23:01:02 BST 2026



Guilhem Moulin pushed to branch master at Debian Security Tracker / security-tracker


Commits:
04d3f299 by Guilhem Moulin at 2026-09-29T00:00:12+02:00
CVE-2026-28348/lxml-html-clean: Reference follow-up commits

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -176666,6 +176666,8 @@ CVE-2026-28348 (lxml_html_clean is a project for HTML cleaning functionalities c
 	[trixie] - lxml-html-clean 0.4.4-1~deb13u1
 	NOTE: https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-hw26-mmpg-fqfg
 	NOTE: Fixed by: https://github.com/fedora-python/lxml_html_clean/commit/2ef732667ddbc74ea59847bcf24b75809aaeed3b (0.4.4)
+	NOTE: Regression: https://github.com/fedora-python/lxml_html_clean/commit/5b7e2288d9e5bda81d1fcf6a4feaed362534899e (0.4.4)
+	NOTE: Additional tests: https://github.com/fedora-python/lxml_html_clean/commit/fd10d79cf8a4d4a962e139aee6d02dec02b2de7c (0.4.4)
 	NOTE: lxml-html-clean was split out of lxml in 5.2.0
 CVE-2026-28343 (CKEditor 5 is a modern JavaScript rich-text editor with an MVC archite ...)
 	TODO: check



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/04d3f2996c52db724b374cfb8ff6af473b39e1b4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/04d3f2996c52db724b374cfb8ff6af473b39e1b4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260928/0e1bbc2a/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list