bleach
python · bleachHeads-up
Bleach fails to strip disallowed URI schemes with Unicode characters
Bleach's `bleach.clean` function fails to strip disallowed URI schemes when they contain Unicode characters (e.g., zero-width spac
17 Jun 2026 · schedule it
python · bleachHeads-up
bleach 6.3.0: ReDoS via email linkification in EMAIL_RE
Bleach 6.3.0 exposes a documented email-linkification path that can cause multi-second CPU consumption per request when processing
17 Jun 2026 · schedule it