Login Request a demo
AN
Product
Antisamy
by Antisamy Project · last CVE Feb 2, 2024
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 1Medium 7Low 0
Severity
All severities8Critical0High1Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Antisamy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-28366
7.5
2%
Apr 21
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption
Affected: before 1.6.6
CVE-2024-23635
6.1
0%
Feb 2
AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources
Affected: before 1.7.5
CVE-2023-43643
6.1
1%
Oct 9
AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources
Affected: before 1.7.4
CVE-2022-28367
6.1
1%
Apr 21
OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input
Affected: before 1.6.6
CVE-2022-29577
6.1
1%
Apr 21
OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input
Affected: before 1.6.7
CVE-2021-35043
6.1
2%
Jul 19
OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected)
Affected: before 1.6.4
CVE-2017-14735
6.1
2%
Sep 25
OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL
Affected: before 1.5.7
CVE-2016-10006
6.1
2%
Dec 24
In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply…
Affected: before 1.5.5
Showing 8