lxml html clean vulnerabilities and fixes

Recent CVEs affecting lxml html clean, with upgrade or downgrade steps. 3 tracked.

Also searched as: lxmlhtmlclean.

lxml html clean has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-03-05. Highest priority: CVE-2024-52595 (score 43/100).

• CVE-2026-28350 MEDIUM 6.1 UPGRADE lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`
• CVE-2026-28348 MEDIUM 6.1 UPGRADE lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`
• CVE-2024-52595 HIGH 7.7 UPGRADE lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`

FAQ

How do I fix lxml html clean vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is lxml html clean being exploited right now?

None of the tracked lxml html clean CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which lxml html clean CVE should I patch first?

CVE-2024-52595 currently ranks highest (43/100): lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`.

RSS feed for lxml html clean · ← Back to latest CVEs