PT-2026-98196

Name of the Vulnerable Software and Affected Versions xhtml-purifier versions prior to 0.4.3 Description The library fails to HTML-entity-encode attribute values during the serialization of sanitized output. In the attributeString function, attribute values are concatenated directly into...

CVE-2026-62296

A flaw was found in HAPI FHIR, a Java implementation of the HL7 FHIR standard. The XHTML narrative parser does not limit element nesting depth, which allows a deeply nested narrative to trigger unbounded recursion. A remote attacker can exploit this vulnerability by submitting FHIR resources...

org.xwiki.rendering:xwiki-rendering-macro-html (6.3-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (6.3-milestone-1) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.3-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.3-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.3-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.3-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (7.3-rc-1) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (7.3-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.3-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.3-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.4.5), org.xwiki.rendering:xwiki-rendering-standalone (5.4.5) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.4.5)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.4.5 -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.4), org.xwiki.rendering:xwiki-rendering-standalone (13.4) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (13.4)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 13.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 13.4 -...

org.xwiki.rendering:xwiki-rendering-macro-html (12.7), org.xwiki.rendering:xwiki-rendering-standalone (12.7) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (12.7)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 12.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.7 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.11.3), org.xwiki.rendering:xwiki-rendering-standalone (10.11.3) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (10.11.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.11.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (12.3), org.xwiki.rendering:xwiki-rendering-standalone (12.3) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (12.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 12.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.4), org.xwiki.rendering:xwiki-rendering-standalone (6.4) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.4)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.4 -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.10.2), org.xwiki.rendering:xwiki-rendering-standalone (13.10.2) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (13.10.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 13.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 13.10.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (12.10.7), org.xwiki.rendering:xwiki-rendering-standalone (12.10.7) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (12.10.7)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 12.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.10.7 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.8-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (10.8-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (10.8-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.8-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.8-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.2.4), org.xwiki.rendering:xwiki-rendering-standalone (6.2.4) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.2.4)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.2.4 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.0), org.xwiki.rendering:xwiki-rendering-standalone (9.0) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (9.0)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.0 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.4.2), org.xwiki.rendering:xwiki-rendering-standalone (6.4.2) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.4.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.4.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.4-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (7.4-milestone-1) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (7.4-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.4-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.4-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.4.7), org.xwiki.rendering:xwiki-rendering-standalone (6.4.7) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.4.7)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.4.7 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.2-milestone-2), org.xwiki.rendering:xwiki-rendering-standalone (7.2-milestone-2) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (7.2-milestone-2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.2-milestone-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.2-milestone-2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.11.5), org.xwiki.rendering:xwiki-rendering-standalone (9.11.5) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (9.11.5)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.11.5 -...