DO
Product
dom-sanitizer
4
CVEs
0
On KEV
7.3
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 2Low 1
Watch
Add dom-sanitizer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-100370 | 4.7 | Sep 28 | DOMSanitizer - Incomplete data: URL Sanitization in DOMSanitizer::isDangerousUrl() Allows Base64-Encoded Payloads to Bypass href and xlink:href Validation Affected: < 1.0.15 |
| CVE-2026-40301 | 4.7 | Apr 17 | rhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directives Affected: < 1.0.10 |
Showing 2