diff --git a/advisories/github-reviewed/2024/11/GHSA-5jfw-gq64-q45f/GHSA-5jfw-gq64-q45f.json b/advisories/github-reviewed/2024/11/GHSA-5jfw-gq64-q45f/GHSA-5jfw-gq64-q45f.json new file mode 100644 index 00000000000..40e745be711 --- /dev/null +++ b/advisories/github-reviewed/2024/11/GHSA-5jfw-gq64-q45f/GHSA-5jfw-gq64-q45f.json @@ -0,0 +1,67 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5jfw-gq64-q45f", + "modified": "2024-11-19T21:07:59Z", + "published": "2024-11-19T21:07:59Z", + "aliases": [ + "CVE-2024-52595" + ], + "summary": "HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through", + "details": "### Impact\n\nThe HTML Parser in lxml does not properly handle context-switching for special HTML tags such as ``, `` and `