CVE-2026-113661

A flaw was found in sanitize-html. In configurations where meta refresh elements and their attributes are permitted, the sanitizer fails to properly filter unsafe scripts or redirect destinations within the refresh content value. A remote attacker could exploit this vulnerability by submitting...