Lucene search
+L

63 matches found

Github Security Blog
Github Security Blog
•added 2026/10/20 6:03 p.m.•7 views

ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render

Summary sanitize-html discards the content of every element in nonTextTags. It delimits that region using htmlparser2's close events, and ignores the isImplied flag htmlparser2 passes it. Closing a still-open ancestor from inside a makes htmlparser2 unwind its stack past the noscript; the synthet...

5.3CVSS5.8AI score0.00349EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder