the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex

CVE-2026-68749 / CVE-2026-68750 — PoC Quadratischer Denial-of-Service in htmlsanitizeex 1.5.3. Die Bibliothek dient dazu, nicht vertrauenswürdiges HTML zu neutralisieren, doch zwei unabhängige superlineare Codepfade ermöglichen es einer einzigen präparierten Anfrage, einen BEAM-Scheduler für...

CVE-2026-68747

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the CSS scrubber in rrrene htmlsanitizeex allows an unauthenticated remote attacker to inject CSS at-rules, including an import of a remote stylesheet, into a page served to other...

CVE-2026-66843

Inclusion of Functionality from Untrusted Control Sphere vulnerability in the HTML5 scrubber in rrrene htmlsanitizeex allows a remote attacker to load a document of their choosing into a trusted page via the data attribute of an element in sanitized HTML. object is the one URI-bearing element in...

CVE-2026-68750 Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of service

Inefficient Algorithmic Complexity vulnerability in the traversal engine in rrrene htmlsanitizeex allows an unauthenticated remote attacker to exhaust server CPU and memory via a flat run of sibling elements in sanitized HTML. The list clause of HtmlSanitizeEx.Traverser.traverse/2 recurses on the...

EUVD-2026-54082

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in the HTML5 scrubber in rrrene htmlsanitizeex allows a remote attacker to force visitors of a page to navigate to a site of the attacker's choosing via a element in sanitized HTML. HtmlSanitizeEx.html5/1 keeps attacker-supplied...

CVE-2026-66370

The CVE concerns html_sanitize_ex (rrrrene) where the HTML5 scrubber fails to validate scheme on form-related attributes, allowing an unauthenticated remote attacker to retarget an existing form on a rendering page and capture submitted data via input form and formaction attributes. No new form c...

CVE-2026-66843

CVE-2026-66843 affects html_sanitize_ex HTML5 scrubber. The vulnerability arises because the object element (data attribute) is not registered in allow_tag_with_uri_attributes/3, and the only guard is a lowercase javascript: prefix. This allows attacker-supplied content to be embedded in a truste...

CVE-2026-66843 html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embedding

Inclusion of Functionality from Untrusted Control Sphere vulnerability in the HTML5 scrubber in rrrene htmlsanitizeex allows a remote attacker to load a document of their choosing into a trusted page via the data attribute of an element in sanitized HTML. object is the one URI-bearing element in...

CVE-2026-66843 html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embedding

Inclusion of Functionality from Untrusted Control Sphere vulnerability in the HTML5 scrubber in rrrene htmlsanitizeex allows a remote attacker to load a document of their choosing into a trusted page via the data attribute of an element in sanitized HTML. object is the one URI-bearing element in...