CVE-2026-113316

Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113117

Out of bounds read in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113117

Out of bounds read in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113117

Out of bounds read in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113117

Google Chrome on Mac prior to version 156.0.8078.47 is vulnerable to arbitrary code execution within the sandbox due to improper input validation in the ANGLE component. A remote attacker can trigger this vulnerability by hosting a crafted HTML page . Remediation is available in the stable channe...

CVE-2026-113082

Integer overflow in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113082

Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113082

Google Chrome on Windows versions prior to 156.0.8078.47 is vulnerable to a memory corruption flaw in the ANGLE component. A remote attacker can exploit this by serving a crafted HTML page to a user, potentially allowing them to read memory inside the sandbox. This issue has been addressed in the...

html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals

A flaw was found in the html/template package in Go. This vulnerability allows a remote attacker to conduct cross-site scripting XSS, an attack that executes malicious scripts in a user's browser through improper output escaping. When a JavaScript template literal contains consecutive expressions...

html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword

A flaw was found in Go's html/template component. This vulnerability allows cross-site scripting XSS due to improper escaping of the 'yield' keyword during template processing. A remote attacker could exploit this flaw by providing crafted input to an affected template, leading to arbitrary scrip...

CVE-2026-113654

A flaw was found in sanitize-html. A remote attacker can bypass HTML sanitization by submitting specially crafted markup when the library is configured to strip noscript tags. In this scenario, the parser can prematurely terminate the discard region, allowing unsanitized content to persist and...

CVE-2026-113650

A flaw was found in sanitize-html. A remote attacker can cause a Denial of Service DoS by submitting specially crafted HTML input containing disallowed iframe elements. Under default configurations, the library re-sanitizes iframe content through unbounded recursive calls, exhausting system...

GHSA-VFGH-JCMW-G37Q markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled

Summary With html: true, markdown-it takes quadratic time to parse repeated unterminated HTML constructs inside a paragraph. This affects HTML comments , ?, , and . When the terminator is absent, matching fails. Parsing eventually reaches the next opener and scans an overlapping suffix again...

npm: markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled

npm: markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled vulnerability discovered by ? in WordPress npm markdown-it versions 14.3.3...

markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled

Summary With html: true, markdown-it takes quadratic time to parse repeated unterminated HTML constructs inside a paragraph. This affects HTML comments , ?, , and . When the terminator is absent, matching fails. Parsing eventually reaches the next opener and scans an overlapping suffix again...

CVE-2026-113657

A flaw was found in sanitize-html. This vulnerability allows a remote attacker to achieve arbitrary script execution when an application is configured to permit namespace-prefixed Scalable Vector Graphics SVG animation elements. By submitting specially crafted SVG markup, an attacker can bypass U...

CVE-2026-113661

A flaw was found in sanitize-html. In configurations where meta refresh elements and their attributes are permitted, the sanitizer fails to properly filter unsafe scripts or redirect destinations within the refresh content value. A remote attacker could exploit this vulnerability by submitting...

@asubasu/pixel-next (>=1.1.1, <=2.0.0), @biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14) +95 more potentially affected by CVE-2026-113650 +1 more via sanitize-html (2.18.0)

sanitize-html NPM version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanitize-html and may be impacted: - @asubasu/pixel-next =1.1.1, =0.1.13, =0.2.0, =9.0.4, =0.1.1, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =1.0.16, =9.6.0, =9.7.1 and more Source...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via its transitive dependency on deepmerge, which is affected by CVE-2026-93753. When sanitize-html merges configuration objects combining tag-specific and wildcard allowedClasses or allowedStyles entries, the...

Uncontrolled Recursion

Overview sanitize-html is a library that allows you to clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis Affected versions of this package are vulnerable to Uncontrolled Recursion via its transitive dependency on deepmerge, which is...