RH
Vendor
rhukster
4
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103687 | DO dom-sanitizer rhukster | 7.3 | Oct 1 | rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist |
| CVE-2026-103686 | DO dom-sanitizer rhukster | 3.5 | Oct 1 | rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting |
| CVE-2026-100370 | DO dom-sanitizer rhukster | 4.7 | Sep 28 | DOMSanitizer - Incomplete data: URL Sanitization in DOMSanitizer::isDangerousUrl() Allows Base64-Encoded Payloads to Bypass href and xlink:href Validation |
| CVE-2026-40301 | DO dom-sanitizer rhukster | 4.7 | Apr 17 | rhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directives |
