id: PYSEC-2026-2201
published: "2026-03-05T20:16:16.180Z"
modified: "2026-07-13T05:49:46.366757Z"
aliases:
- CVE-2026-28348
- GHSA-hw26-mmpg-fqfg
details: lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.4, the _has_sneaky_javascript() method strips backslashes before checking for dangerous CSS keywords. This causes CSS Unicode escape sequences to bypass the @import and expression() filters, allowing external CSS loading or XSS in older browsers. This issue has been patched in version 0.4.4.
affected:
- package:
    name: lxml-html-clean
    ecosystem: PyPI
    purl: pkg:pypi/lxml-html-clean
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 0.4.4
  versions:
  - 0.1.0
  - 0.1.1
  - 0.2.0
  - 0.2.1
  - 0.2.2
  - 0.3.0
  - 0.3.1
  - 0.4.0
  - 0.4.1
  - 0.4.2
  - 0.4.3
  ecosystem_specific: {}
references:
- type: FIX
  url: https://github.com/fedora-python/lxml_html_clean/commit/2ef732667ddbc74ea59847bcf24b75809aaeed3b
- type: EVIDENCE
  url: https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-hw26-mmpg-fqfg
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N