119078 matches found
Cross-site Scripting (XSS)
Overview sanitize-html is a library that allows you to clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis Affected versions of this package are vulnerable to Cross-site Scripting XSS via the nonTextTags configuration when noscript is...
org.webjars.npm:github-com-daichirata-vue-sanitize (0.2.2), org.webjars.npm:github-com-daichirata-vue-sanitize- (0.2.2) potentially affected by CVE-2026-113654 via org.webjars.npm:sanitize-html (2.7.0)
org.webjars.npm:sanitize-html MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sanitize-html and may be impacted: - org.webjars.npm:github-com-daichirata-vue-sanitize 0.2.2 -...
Cross-site Scripting (XSS)
Overview apostrophe is a content management system CMS for Node.js. It supports in-context editing, schema-driven content types, flexible widgets and a great deal more. This module contains everything necessary to build a website with ApostropheCMS. Affected versions of this package are vulnerabl...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via insufficient sanitization of HTML input, allowing an attacker to inject malicious scripts that execute in a victim's browser. Details Cross-site scripting or XSS is a code vulnerability that occurs when an...
@blinkk/root-cms (>=3.5.2, <=4.3.5), @depup/directus (>=12.3.0-depup.0, <=12.5.0-depup.0) +112 more potentially affected by CVE-2026-113657 via sanitize-html (2.17.7)
sanitize-html NPM version 2.17.7 is affected by a known vulnerability. The following packages have a transitive dependency on sanitize-html and may be impacted: - @blinkk/root-cms =3.5.2, =12.3.0-depup.0, =39.0.0, =9.0.2, =0.0.0-dummy.1, =0.29.2, =0.1.0, =0.10.2, =2.208.0, =2.208.0, =2.389.1,...
Cross-site Scripting (XSS)
Overview sanitize-html is a library that allows you to clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis Affected versions of this package are vulnerable to Cross-site Scripting XSS via insufficient sanitization of HTML input, allowing...
org.webjars.npm:github-com-daichirata-vue-sanitize (0.2.2), org.webjars.npm:github-com-daichirata-vue-sanitize- (0.2.2) potentially affected by CVE-2026-113661 via org.webjars.npm:sanitize-html (2.7.0)
org.webjars.npm:sanitize-html MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sanitize-html and may be impacted: - org.webjars.npm:github-com-daichirata-vue-sanitize 0.2.2 -...
Cross-site Scripting (XSS)
Overview sanitize-html is a library that allows you to clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis Affected versions of this package are vulnerable to Cross-site Scripting XSS via insufficient sanitization of meta refresh element...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via insufficient sanitization of meta refresh elements, where a non-default configuration that permits meta tags with http-equiv and content attributes allows unsafe script or redirect destinations embedded in t...
@blinkk/root-cms (>=3.5.2, <=4.3.5), @depup/directus (>=12.3.0-depup.0, <=12.5.0-depup.0) +112 more potentially affected by CVE-2026-113657 via sanitize-html (2.17.7)
sanitize-html NPM version 2.17.7 is affected by a known vulnerability. The following packages have a transitive dependency on sanitize-html and may be impacted: - @blinkk/root-cms =3.5.2, =12.3.0-depup.0, =39.0.0, =9.0.2, =0.0.0-dummy.1, =0.29.2, =0.1.0, =0.10.2, =2.208.0, =2.208.0, =2.389.1,...
GHSA-374F-7CHJ-9948 ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)
Summary sanitize-html 2.17.7 introduced animatesUrlAttribute to block SVG animation elements animate, animateColor, animateMotion, animateTransform, set when their attributeName targets a URL sink like href. However, this check is bypassed when the animation element uses a namespace prefix e.g.,...
ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)
Summary sanitize-html 2.17.7 introduced animatesUrlAttribute to block SVG animation elements animate, animateColor, animateMotion, animateTransform, set when their attributeName targets a URL sink like href. However, this check is bypassed when the animation element uses a namespace prefix e.g.,...
npm: ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)
npm: ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection XSS vulnerability discovered by ? in WordPress npm sanitize-html versions = 2.17.7, 2.18.0...
@blinkk/root-cms (>=3.5.2, <=4.3.5), @depup/directus (>=12.3.0-depup.0, <=12.5.0-depup.0) +112 more potentially affected by CVE-2026-113657 via sanitize-html (2.17.7)
sanitize-html NPM version 2.17.7 is affected by a known vulnerability. The following packages have a transitive dependency on sanitize-html and may be impacted: - @blinkk/root-cms =3.5.2, =12.3.0-depup.0, =39.0.0, =9.0.2, =0.0.0-dummy.1, =0.29.2, =0.1.0, =0.10.2, =2.208.0, =2.208.0, =2.389.1,...
CVE-2026-113661
ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to sanitize-html 2.18.0, a non-default configuration that allows meta refresh elements and their http-equiv and content attributes can retain unsafe script...
npm: ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs
npm: ApostropheCMS: Incomplete CVE-2026-53606: meta http-equiv=refresh content still ships javascript: / data: URLs vulnerability discovered by ? in WordPress npm sanitize-html versions 2.18.0...
npm: ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render
npm: ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting content render vulnerability discovered by ? in WordPress npm sanitize-html versions 2.18.0...
ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render
Summary sanitize-html discards the content of every element in nonTextTags. It delimits that region using htmlparser2's close events, and ignores the isImplied flag htmlparser2 passes it. Closing a still-open ancestor from inside a makes htmlparser2 unwind its stack past the noscript; the synthet...
GHSA-X3Q4-9HXX-GX8M ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render
Summary sanitize-html discards the content of every element in nonTextTags. It delimits that region using htmlparser2's close events, and ignores the isImplied flag htmlparser2 passes it. Closing a still-open ancestor from inside a makes htmlparser2 unwind its stack past the noscript; the synthet...
CVE-2026-113657
ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From sanitize-html 2.17.7 until 2.18.0, an application configuration that permits namespace-prefixed SVG animation elements and the relevant URL-targeting...