openSUSE Tumbleweed — python36-lxml — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:0803-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-27783 CVE-2021-28957 Upstream summary: A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between […]