PT-2026-118495

Name of the Vulnerable Software and Affected Versions sanitize-html version 2.18.0 Description In the sanitize-html library, a recursive call to the sanitizeHtmltext, options function occurs when an tag is not permitted and the disallowedTagsMode is set to 'discard'. Because this recursion lacks ...

Apostrophe Technologies ApostropheCMS Resource Management Vulnerability

Apostrophe Technologies ApostropheCMS has a resource management vulnerability. This vulnerability arises when is not allowed and disallowedTagsMode is set to the default value 'discard'. In such cases, the sanitizeHtml function is recursively called to clean up the original text content. This...