CVE-2026-113654

The sanitize-html library, used in ApostropheCMS , is vulnerable to a logic error in its handling of nonTextTags configurations. Specifically, when noscript is included in a non-default configuration, the discard region can end prematurely because htmlparser2 emits an implied ancestor close. This...