CVE-2023-44390

HtmlSanitizer is a .NET library for cleaning HTML; vulnerability arises when foreign content is allowed (svg or math in the allowed list), enabling bypass of sanitization and injection of arbitrary HTML/JavaScript. Default configuration is not affected. Affected versions and fix: fixed in 8.0.723...

CVE-2020-26293

The provided connected documents confirm a concrete vulnerability in HtmlSanitizer (a .NET library) where an XSS bypass is possible in versions before 5.0.372 if the tag is explicitly allowed. The default policy disallows , so risk exists only when that tag is whitelisted. The issue has been fix...

CVE-2026-25543

HtmlSanitizer (a .NET library) is vulnerable where the template tag is allowed: its contents were not sanitized, enabling potential bypasses (e.g., via mutation or shadowrootmode) to bypass sanitization. Red Hat/NVD/osv/GHSA entries confirm the vulnerability and patch follow-ups. The issue is pat...