CVE-2026-53606

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Versions of sanitize-html prior to 2.17.5 use "allowedSchemesAppliedToAttributes" default: "'href', 'src', 'cite'" to gate the "naughtyHref" function that blocks...