CVE-2021-42576

CRITICAL · CVSS 9.8 EPSS 1.51%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-10-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-42576

Severity

CRITICAL

CVSS

9.8

EPSS

1.51%

Original NVD Description

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.