HT
Vendor
Htmlunit
7
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104828 | HT htmlunit-neko HtmlUnit | 7.2 | Oct 15 | HtmlUnit Neko: Mutation XSS (mXSS) in HTMLWriterFilter - TEXTAREA/TITLE entity decode without re-encode |
| CVE-2023-49093 | HT Htmlunit Htmlunit | 8.8 | Dec 4 | HtmlUnit is a GUI-less browser for Java programs |
| CVE-2023-2798 | HT Htmlunit Htmlunit | 7.5 | May 25 | Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS) |
| CVE-2023-26119 | HT Htmlunit Htmlunit | 9.8 | Apr 3 | Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage |
| CVE-2022-29546 | HT Htmlunit Htmlunit | 7.5 | Apr 25 | HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability |
| CVE-2022-28366 | HT Htmlunit Htmlunit | 7.5 | Apr 21 | Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption |
| CVE-2020-5529 | HT Htmlunit Htmlunit | 8.1 | Feb 11 | HtmlUnit prior to 2.37.0 contains code execution vulnerabilities |