CVE-2026-49825 | lxml up to 6.1.0 Link Attributes lxml.html.defs input validation

August 20, 2026 Yanac

A vulnerability classified as critical was found in lxml up to 6.1.0. This affects an unknown function of the file lxml.html.defs of the component Link Attributes. Such manipulation leads to improper input validation.

This vulnerability is traded as CVE-2026-49825. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More