id: PYSEC-2026-2202
published: "2026-03-05T20:16:16.333Z"
modified: "2026-07-13T05:49:46.439290Z"
aliases:
- CVE-2026-28350
- GHSA-xvp8-3mhv-424c
details: lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.4, the <base> tag passes through the default Cleaner configuration. While page_structure=True removes html, head, and title tags, there is no specific handling for <base>, allowing an attacker to inject it and hijack relative links on the page. This issue has been patched in version 0.4.4.
affected:
- package:
    name: lxml-html-clean
    ecosystem: PyPI
    purl: pkg:pypi/lxml-html-clean
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 0.4.4
  versions:
  - 0.1.0
  - 0.1.1
  - 0.2.0
  - 0.2.1
  - 0.2.2
  - 0.3.0
  - 0.3.1
  - 0.4.0
  - 0.4.1
  - 0.4.2
  - 0.4.3
  ecosystem_specific: {}
references:
- type: FIX
  url: https://github.com/fedora-python/lxml_html_clean/commit/9c5612ca33b941eec4178abf8a5294b103403f34
- type: EVIDENCE
  url: https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-xvp8-3mhv-424c
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N