Critical Bleach Vulnerabilities Affect Multiple Ubuntu Releases

Critical Bleach Vulnerabilities Affect Multiple Ubuntu Releases

First seen 6 Mar 2026, 01:12 UTC UbuntuLinuxsecurity 66.8

Article Content

Browse articles
ThreatCluster

A security issue in the Bleach HTML sanitizing library affects Ubuntu 20.04, 18.04, and 16.04 LTS. The vulnerabilities allow attackers to bypass sanitization and potentially execute cross-site scripting attacks. The most critical issue was discovered in Bleach's handling of URI attributes, posing a significant risk to affected systems.

Timeline

2018-03-07
CVE-2018-7753 published
2020-03-24
CVE-2020-6802 published
2020-03-24
CVE-2020-6816 published
2023-02-16
CVE-2020-6817 published
2023-02-16
CVE-2021-23980 published
2026-03-05
Ubuntu releases USN-8077-1 addressing Bleach vulnerabilities
Recent
Patches for affected Ubuntu versions released