PT-2026-98196

Name of the Vulnerable Software and Affected Versions xhtml-purifier versions prior to 0.4.3 Description The library fails to HTML-entity-encode attribute values during the serialization of sanitized output. In the attributeString function, attribute values are concatenated directly into...

CVE-2026-62296

A flaw was found in HAPI FHIR, a Java implementation of the HL7 FHIR standard. The XHTML narrative parser does not limit element nesting depth, which allows a deeply nested narrative to trigger unbounded recursion. A remote attacker can exploit this vulnerability by submitting FHIR resources...

org.xwiki.rendering:xwiki-rendering-macro-html (11.5), org.xwiki.rendering:xwiki-rendering-standalone (11.5) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.5)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.5 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.2.4), org.xwiki.rendering:xwiki-rendering-standalone (6.2.4) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.2.4)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.2.4 -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.4), org.xwiki.rendering:xwiki-rendering-standalone (13.4) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (13.4)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 13.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 13.4 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.3), org.xwiki.rendering:xwiki-rendering-standalone (11.3) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (8.1-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (8.1-milestone-1) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (8.1-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 8.1-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 8.1-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.2), org.xwiki.rendering:xwiki-rendering-standalone (11.2) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.9), org.xwiki.rendering:xwiki-rendering-standalone (13.9) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (13.9)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 13.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 13.9 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.3-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (7.3-rc-1) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (7.3-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.3-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.3-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.6), org.xwiki.rendering:xwiki-rendering-standalone (11.6) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.6)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.6 -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.3-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (13.3-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (13.3-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 13.3-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 13.3-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (12.1), org.xwiki.rendering:xwiki-rendering-standalone (12.1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (12.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.1-milestone-2), org.xwiki.rendering:xwiki-rendering-standalone (7.1-milestone-2) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (7.1-milestone-2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.1-milestone-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.1-milestone-2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.3-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (6.3-milestone-1) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.3-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.3-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.3-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.4-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (7.4-milestone-1) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (7.4-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.4-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.4-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.8-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (10.8-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (10.8-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.8-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.8-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.11.3), org.xwiki.rendering:xwiki-rendering-standalone (10.11.3) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (10.11.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.11.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (12.3), org.xwiki.rendering:xwiki-rendering-standalone (12.3) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (12.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 12.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.5), org.xwiki.rendering:xwiki-rendering-standalone (9.5) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (9.5)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.5 -...