Known vulnerabilities in Bleach

Vendor: Mozilla
Software: Bleach
Software CPE: cpe:2.3:a:mozilla:bleach:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bleach Bleach is affected by 8 known vulnerabilities: 2 medium, 6 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133466 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
6.4.0 08.06.2026 SB2026060815
#VU133465 - Inefficient Regular Expression Complexity
CWE-1333 Low
No
No
6.4.0 08.06.2026 SB2026060815
#VU133464 - Incomplete List of Disallowed Inputs
CWE-184 Low
No
No
6.4.0 08.06.2026 SB2026060815
#VU55500 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23980
CWE-79 Medium
No
No
3.3.0 02.08.2021 SB2021080212
SB2021080213
SB2021041804
and 3 more
#VU26415 - Resource Management Errors
CVE-2020-6817
CWE-399 Low
No
No
3.1.4 26.03.2020 SB2020032631
SB2020042261
SB2020042262
and 3 more
#VU26414 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-6816
CWE-79 Low
No
No
3.1.2 26.03.2020 SB2020032630
SB2020032666
SB2020032104
and 2 more
#VU25729 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-6802
CWE-79 Low
No
No
3.1.1 02.03.2020 SB2020030209
SB2020030916
SB2020030702
and 7 more
#VU10962 - Improper Handling of Values
CVE-2018-7753
CWE-229 Low
No
No
- 13.03.2018 SB2018030506
SB2018030637
SB2018030638
and 1 more