| Release | Version |
|---|---|
| bookworm | 2.7.6+dfsg-1 |
| trixie | 2.9.0+dfsg-5 |
| forky | 2.11.0+dfsg-1 |
| sid | 2.12.0+dfsg-1 |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| TEMP-0000000-9EE592 | vulnerable | vulnerable | vulnerable | fixed | GHSA-pj59-fvjc-74pp: Quadratic parse-error bookkeeping, unescaped xmlns:* serialization, xmlns TypeError and invalid UTF-8 deletion in masterminds/html5 |
| TEMP-0000000-004B67 | vulnerable | vulnerable | vulnerable | fixed | GHSA-6c7p-58mg-f5jv: Parser converts safe attributes containing form feed characters into dangerous attributes |