java-html-sanitizer

OWASP Java HTML Sanitizer यह Java में लिखा गया एक तेज़ और कॉन्फ़िगर करने में आसान HTML सैनिटाइज़र है जो आपको अपने वेब एप्लिकेशन में तृतीय-पक्षों द्वारा लिखे गए HTML को शामिल करने की सुविधा देता है, साथ ही XSS से सुरक्षा प्रदान करता है। मौजूदा निर्भरता JSR 305 पर है। अन्य jars केवल परीक्षण सुइट के...

TYPO3-HTML-Sanitizer-XSS-CVE-2023-47125

TYPO3 HTML Sanitizer में संग्रहीत XSS शोषण CVE-2023-47125 विवरण DOM प्रसंस्करण निर्देशों को सही ढंग से संभाला नहीं जाता है। यह typo3/html-sanitizer के क्रॉस-साइट स्क्रिप्टिंग तंत्र को बायपास करने की अनुमति देता है। कमजोर संस्करण = 1.0.0, = 2.0.0,...

HTMLawed

HTMLawed क्या है ... ... एक single-file, 45 kb PHP स्क्रिप्ट है जो इनपुट टेक्स्ट को अधिक सुरक्षित, HTML मानकों के अनुरूप, तथा सामान्यतः एक वेब-पेज व्यवस्थापक के दृष्टिकोण से, HTML, XHTML या XML दस्तावेज़ों के body में उपयोग के लिए उपयुक्त बनाती है। एक सरल HTMLTidy विकल्प, htmLawed फ़िल्टर,...

bluemonday

bluemonday bluemonday Go में कार्यान्वित एक HTML सैनिटाइज़र है। यह तेज़ और अत्यधिक कॉन्फ़िगरेबल है। bluemonday अविश्वसनीय उपयोगकर्ता द्वारा उत्पन्न सामग्री को इनपुट के रूप में लेता है, और अनुमोदित HTML तत्वों और विशेषताओं की एक अनुमति सूची के विरुद्ध स्वच्छ किए गए HTML को लौटाता है ताकि आप सुरक्ष...

OWASPBugBounty

परियोजनाओं के लिए OWASP बग बाउंटी परिचय सुरक्षा लागू करने के इच्छुक कई डेवलपर्स और कंपनियाँ अपने महत्वपूर्ण अनुप्रयोगों को सुरक्षित करने के लिए लागू की जा सकने वाली Defender लाइब्रेरीज़ का उपयोग करने हेतु OWASP की ओर रुख कर रही हैं। चूँकि यह OWASP पर एक प्रकार का विश्वास दर्शाता है, इन परियोजनाओं...

CVE-2026-104083

SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers to inject executable script by placing payloads inside a element nested within MathML foreign content , which the custom HTML sanitizer treats as inert CDATA text but browsers...

bleach

Bleach सूचना: 2026-06-05: Bleach अब अनुरक्षित नहीं है। सुरक्षा मुद्दों सहित भविष्य में कोई रिलीज़ नहीं होगी। देखें मुद्दा: Bleach एक अनुमत-सूची-आधारित HTML स्वच्छीकरण लाइब्रेरी है जो मार्कअप और विशेषताओं को एस्केप या हटा देती है। Bleach सुरक्षित रूप से टेक्स्ट को लिंकीफाई भी कर सकता है, Django के...

Security Bulletin: Multiple vulnerabilities have been addressed in IBM Aspera Shares

Summary Multiple vulnerabilities have been addressed in IBM Aspera Shares Version 1.11.5 Vulnerability Details CVEID:CVE-2026-63435 DESCRIPTION: Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and...

SUSE SLES15 Security Update : rubygem-rails-html-sanitizer (SUSE-SU-2026:4445-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4445-1 advisory. This update for rubygem-rails-html-sanitizer fixes the following issue: - CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when t...

Astra Linux – Vulnerability in Firefox

The HTML Sanitizer should have sanitized the href attribute of SVG use tags; however, it incorrectly did not sanitize the xlink:href attributes. This vulnerability affects Firefox versions earlier than 102...

Security update for rubygem-rails-html-sanitizer

This update for rubygem-rails-html-sanitizer fixes the following issue: CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements bsc1275199. Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2026:4445-1 Security update for rubygem-rails-html-sanitizer

This update for rubygem-rails-html-sanitizer fixes the following issue: - CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements bsc1275199...

sanitize

Sanitize Sanitize is an allowlist-based HTML and CSS sanitizer. It removes all HTML and/or CSS from a string except the elements, attributes, and properties you choose to allow. Using a simple configuration syntax, you can tell Sanitize to allow certain HTML elements, certain attributes within...

CVE-2026-55230

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's HTML sanitizer fails to strip event-handler attributes when a tag carries a greater-than character inside a quoted attribute value. A low-privilege content...

CVE-2026-55230

The Vvveb CMS (prior to version 1.0.8.6 ) contains a Stored XSS vulnerability due to a flaw in the sanitizeHTML() filter. The HTML sanitizer fails to strip event-handler attributes when a tag contains a greater-than character inside a quoted attribute value. A low-privilege content author (such a...

EUVD-2026-91038

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's HTML sanitizer fails to strip event-handler attributes when a tag carries a greater-than character inside a quoted attribute value. A low-privilege content...

PT-2026-103974

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's HTML sanitizer fails to strip event-handler attributes when a tag carries a greater-than character inside a quoted attribute value. A low-privilege content...

CVE-2026-55230: Improper Neutralization of Input During Web Page Generation

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's HTML sanitizer fails to strip event-handler attributes when a tag carries a greater-than character inside a quoted attribute value. A low-privilege content...

Rocky Linux 8 [CIQ] Security Update: libdb-cxx / libdb-cxx-debuginfo / libdb-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_8506)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228506 advisory. netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data CVE-2021-37136 netty-codec: SnappyFrameDecoder doesn't restrict chu...

CVE-2026-63206

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's HTML sanitizer, which blocks remote images in ticket articles and email views, can be bypassed using a shortened URL format that omits the double slash after the scheme for example a shortened HTTP URL...