owasp-java-encoder

OWASP Java Encoder Contextual output encoding for Java 8+. Choose an encoder for the parser context receiving untrusted text: HTML, JavaScript, CSS, XML or a URL component. The core has no runtime dependencies; optional JSP and Jakarta adapters provide view-layer bindings. Encoding is one part of...

ROOT-APP-MAVEN-CVE-2025-66021 CVE-2025-66021 in com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer - Patched by Root

Root has patched CVE-2025-66021 in the com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer package for Root:Maven. Multiple fixed versions available...

CVE-2025-66021

OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS. In version 20240325.1, OWASP java html sanitizer is vulnerable to XSS if HtmlPolicyBuilder allows noscript and style...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=8.0.0, <=8.6.8), ca.uhn.hapi.fhir:hapi-fhir-docs (>=8.0.0, <=8.6.8) +333 more potentially affected by CVE-2025-66021 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20240325.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20240325.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

CVE-2025-66021

OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS. In version 20240325.1, OWASP java html sanitizer is vulnerable to XSS if HtmlPolicyBuilder allows noscript and style...

CVE-2025-66021: Improper Neutralization of Input During Web Page Generation

OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS. In version 20240325.1, OWASP java html sanitizer is vulnerable to XSS if HtmlPolicyBuilder allows noscript and style...

au.csiro.pathling:fhir-server (>=6.2.2, <=7.2.0), br.com.jarch:jarch-apt (>=20.7.0, <=25.12.0) +773 more potentially affected by CVE-2025-66021 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (>=r136, <=20240325.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version =r136, =6.2.2, =20.7.0, =24.2.0, =20.7.0, =23.1.0, =24.2.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =8.6.8 and more Source cves: CVE-2025-66021 Source advisory:...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=8.0.0, <=8.6.8), ca.uhn.hapi.fhir:hapi-fhir-docs (>=8.0.0, <=8.6.8) +333 more potentially affected by CVE-2025-66021 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20240325.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20240325.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=8.0.0, <=8.6.8), ca.uhn.hapi.fhir:hapi-fhir-docs (>=8.0.0, <=8.6.8) +333 more potentially affected by CVE-2025-66021 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20240325.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20240325.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

PT-2025-48110

Name of the Vulnerable Software and Affected Versions OWASP Java HTML Sanitizer versions 20240325.1 Description OWASP Java HTML Sanitizer is vulnerable to Cross-Site Scripting XSS when the HtmlPolicyBuilder allows noscript and style tags with allowTextIn enabled within the style tag. This occurs...

EUVD-2021-2151

Malware in sbrugna...

new packages: owasp-java-encoder

An update is available for owasp-java-encoder. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

net.twibs:twibs-core (0.8) potentially affected by CVE-2011-4457 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r223)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r223 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: - net.twibs:twibs-core 0.8...

org.internetitem:framework (>=1.9, <=2.1), org.internetitem:logback-elasticsearch-appender (>=1.8, <=2.1) potentially affected by CVE-2011-4457 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r136)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r136 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: - org.internetitem:framework...

net.twibs:twibs-core (>=0.5, <=0.7) potentially affected by CVE-2011-4457 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r209)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r209 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: - net.twibs:twibs-core =0.5,...

com.microsoftopentechnologies:azure-slave (>=0.1.0, <=0.3.0), com.microsoftopentechnologies:windows-azure-storage-plugin (0.3.1) +65 more potentially affected by CVE-2011-4457 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r173)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r173 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.github.bgalek.security.svg:safe-svg (1.1.6), org.support-project:web (>=1.4.0, <=1.5.0) potentially affected by CVE-2011-4457 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (1.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.extole:client-rest (>=1.0.2, <=1.0.3), com.github.dalet-oss:parameter-validation-filter (>=1.3.0, <=1.4.3) +11 more potentially affected by CVE-2011-4457 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r239)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r239 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: - com.extole:client-rest =1.0....

CVE-2021-42575

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

com.googlecode.owasp-java-html-sanitizer:html-types (20170329.1) potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20170329.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20170329.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...