ROOT-APP-MAVEN-CVE-2025-66021 CVE-2025-66021 in com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer - Patched by Root

Root has patched CVE-2025-66021 in the com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer package for Root:Maven. Multiple fixed versions available...

CVE-2025-66021

OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS. In version 20240325.1, OWASP java html sanitizer is vulnerable to XSS if HtmlPolicyBuilder allows noscript and style...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=8.0.0, <=8.6.8), ca.uhn.hapi.fhir:hapi-fhir-docs (>=8.0.0, <=8.6.8) +333 more potentially affected by CVE-2025-66021 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20240325.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20240325.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

CVE-2025-66021: Improper Neutralization of Input During Web Page Generation

OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS. In version 20240325.1, OWASP java html sanitizer is vulnerable to XSS if HtmlPolicyBuilder allows noscript and style...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=8.0.0, <=8.6.8), ca.uhn.hapi.fhir:hapi-fhir-docs (>=8.0.0, <=8.6.8) +333 more potentially affected by CVE-2025-66021 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20240325.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20240325.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

au.csiro.pathling:fhir-server (>=6.2.2, <=7.2.0), br.com.jarch:jarch-apt (>=20.7.0, <=25.12.0) +773 more potentially affected by CVE-2025-66021 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (>=r136, <=20240325.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version =r136, =6.2.2, =20.7.0, =24.2.0, =20.7.0, =23.1.0, =24.2.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =8.6.8 and more Source cves: CVE-2025-66021 Source advisory:...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=8.0.0, <=8.6.8), ca.uhn.hapi.fhir:hapi-fhir-docs (>=8.0.0, <=8.6.8) +333 more potentially affected by CVE-2025-66021 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20240325.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20240325.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

EUVD-2021-2151

Malware in sbrugna...

org.internetitem:framework (>=1.9, <=2.1), org.internetitem:logback-elasticsearch-appender (>=1.8, <=2.1) potentially affected by CVE-2011-4457 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r136)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r136 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: - org.internetitem:framework...

com.microsoftopentechnologies:azure-slave (>=0.1.0, <=0.3.0), com.microsoftopentechnologies:windows-azure-storage-plugin (0.3.1) +65 more potentially affected by CVE-2011-4457 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r173)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r173 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

net.twibs:twibs-core (0.8) potentially affected by CVE-2011-4457 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r223)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r223 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: - net.twibs:twibs-core 0.8...

com.github.bgalek.security.svg:safe-svg (1.1.6), org.support-project:web (>=1.4.0, <=1.5.0) potentially affected by CVE-2011-4457 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (1.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

net.twibs:twibs-core (>=0.5, <=0.7) potentially affected by CVE-2011-4457 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r209)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r209 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: - net.twibs:twibs-core =0.5,...

com.extole:client-rest (>=1.0.2, <=1.0.3), com.github.dalet-oss:parameter-validation-filter (>=1.3.0, <=1.4.3) +11 more potentially affected by CVE-2011-4457 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r239)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r239 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: - com.extole:client-rest =1.0....

CVE-2021-42575

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

com.github.spacialcircumstances.gradle-cucumber-reporting:com.github.spacialcircumstances.gradle-cucumber-reporting.gradle.plugin (>=0.0.1, <=0.0.11), com.googlecode.owasp-java-html-sanitizer:html-types (20170515.1) +14 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20170515.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20170515.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.github.spacialcircumstances.gradle-cucumber-reporting:com.github.spacialcircumstances.gradle-cucumber-reporting.gradle.plugin (>=0.0.12, <=0.1.0a), com.github.spacialcircumstances:gradle-cucumber-reporting (>=0.0.16, <=0.1.0a) +35 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20180219.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20180219.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

org.internetitem:framework (>=1.9, <=2.1), org.internetitem:logback-elasticsearch-appender (>=1.8, <=2.1) potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r136)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r136 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: - org.internetitem:framework...

com.accenture.atom:library-reporting-allure (0.0.1), com.accenture.atom:library-reporting-extent (0.0.1) +19 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20190610.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20190610.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.codingame.gameengine:runner (>=3.15.3, <=4.1.2), com.github.fmarmar:cucumber-tools (>=0.2.0-alpha, <=0.4.1) +28 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20171016.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20171016.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...