SA
Product
sanitize-html
14
CVEs
0
On KEV
9.3
Max CVSS
4
New 30D
Severity mix
Critical 1High 1Medium 11Low 1
Watch
Add sanitize-html to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-113657 | 3.7 | Oct 20 | ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS) Affected: >= 2.17.7, < 2.18.0 |
Showing 1