CVE-2026-47344

When ALLOWINSECURERAWTEXT is enabled, whitespace-variant closing tags e.g., are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing subsequent content to escape sanitization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitiz...

CVE-2022-0801

Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS preventions via a crafted HTML page. Chrome security severity: Medium...

PT-2021-6241

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 99.0.4844.51 Description The issue is related to an inappropriate implementation in the HTML parser, allowing a remote attacker to bypass XSS preventions via a crafted HTML page. This could potentially lead to...