java-html-sanitizer

OWASP Java HTML Sanitizer Un sanitizador de HTML rápido y fácil de configurar escrito en Java que te permite incluir HTML generado por terceros en tu aplicación web mientras te proteges contra XSS. La dependencia existente es de JSR 305. Los otros archivos JAR solo son necesarios para el conjunto...

morty

Morty Web content sanitizer proxy as a service Morty rewrites web pages to exclude malicious HTML tags and attributes. It also replaces external resource references to prevent third party information leaks. The main goal of morty is to provide a result proxy for searx, but it can be used as a...

nahsra__antisamy_CVE-2016-10006_1-5-3

antisamy Una biblioteca para realizar una limpieza rápida y configurable de HTML proveniente de fuentes no confiables. Otra forma de decirlo podría ser: es una API que te ayuda a asegurarte de que los clientes no suministren código malicioso en el HTML que envían para su perfil, comentarios, etc....

nahsra__antisamy_CVE-2022-29577_1-6-6-1

AntiSamy Una biblioteca para realizar una limpieza rápida y configurable de HTML proveniente de fuentes no confiables. Compatible con Java 7+. Otra forma de decirlo podría ser: es una API que te ayuda a asegurarte de que los clientes no proporcionen código malicioso en el HTML que envían para su...

CVE-2025-25296

CVE-2025-25296 Prueba de Concepto POC Descripción Este proyecto demuestra una prueba de concepto POC para la vulnerabilidad CVE-2025-25296 que afecta a Label Studio, una herramienta de etiquetado de datos de código abierto. La vulnerabilidad reside en el endpoint /projects/upload-example, que no...

CVE-2026-22849

CVE-2026-22849: Saleor carece de una sanitización adecuada de HTML en los campos de texto enriquecido Resumen Campo| Detalles ---|--- ID CVE| CVE-2026-22849 Gravedad| ALTA Aviso| Ver aviso Descubierto por| Lukasz Rybak Productos afectados saleor/saleor Detalles Saleor permitía a los usuarios...

CVE-2026-54049: Improper Neutralization of Input During Web Page Generation

Sakai is a Collaboration and Learning Environment CLE. From versions 23.0 to before 23.5, and versions 25.0 to before 25.3, the Sakai Conversations tool stores topic and post messages without HTML sanitization, and the frontend renders them using LitElement's unsafeHTML directive, resulting in...

CVE-2024-42009

CVE-2024-42009 – Roundcube Stored XSS Docker PoC 📌 Overview This repository demonstrates a working Proof-of-Concept PoC for CVE-2024-42009 , a stored Cross-Site Scripting XSS vulnerability in Roundcube Webmail. The vulnerability is caused by improper HTML sanitization followed by unsafe attribute...

CVE-2026-56732

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerability in Zammad's HTML sanitization allows injection of specific HTML elements into ticket bodies. When another user views the crafted ticket, the injected element can trigger a logout request, terminating...

CVE-2026-56732

Prior to version 7.0.2 , the Zammad open source helpdesk system is vulnerable to an HTML sanitization flaw. This allows an attacker to inject specific HTML elements into ticket bodies . When another user views the crafted ticket, the injected element triggers a logout request , resulting in the t...

CVE-2026-56732 Zammad: Malicious input in Ticket Body Enables Session Termination

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerability in Zammad's HTML sanitization allows injection of specific HTML elements into ticket bodies. When another user views the crafted ticket, the injected element can trigger a logout request, terminating...

EUVD-2026-87219

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerability in Zammad's HTML sanitization allows injection of specific HTML elements into ticket bodies. When another user views the crafted ticket, the injected element can trigger a logout request, terminating...

CVE-2026-56732 Zammad: Malicious input in Ticket Body Enables Session Termination

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerability in Zammad's HTML sanitization allows injection of specific HTML elements into ticket bodies. When another user views the crafted ticket, the injected element can trigger a logout request, terminating...

CVE-2026-56732 Zammad: Malicious input in Ticket Body Enables Session Termination

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerability in Zammad's HTML sanitization allows injection of specific HTML elements into ticket bodies. When another user views the crafted ticket, the injected element can trigger a logout request, terminating...

EUVD-2026-87232

Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML sanitization in its processing of imported document metadata. Attacker-controlled fields such as the author meta tag are inserted into a WebView via innerHTML, enabling stored XSS that executes on synced...

EUVD-2026-86384

code16/sharp has a stored XSS via data-html-content Sanitizer Bypass...

CVE-2026-56732: Improper Input Validation

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerability in Zammad's HTML sanitization allows injection of specific HTML elements into ticket bodies. When another user views the crafted ticket, the injected element can trigger a logout request, terminating...

CVE-2026-61825

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored cross-site scripting vulnerability in SharpEditorFormField: attacker-controlled content bearing the data-html-content attribute can bypass HTML...

CVE-2026-61825

The code16/sharp Laravel-based framework is vulnerable to stored cross-site scripting (XSS) in versions before 9.22.5 . The flaw exists within the SharpEditorFormField component, where attacker-controlled content using the data-html-content attribute can bypass HTML sanitization to preserve and e...

CVE-2026-61825: Improper Neutralization of Input During Web Page Generation

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored cross-site scripting vulnerability in SharpEditorFormField: attacker-controlled content bearing the data-html-content attribute can bypass HTML...