3 issues skipped by the security teams:
- CVE-2020-6816: In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False.
- CVE-2020-6817:
- CVE-2020-6802: In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/p/python-bleach.png){kind=link}