Vulnerability in Rrrene Html_sanitize_ex

CVE-2026-68749

Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to exhaust server CPU via a long CSS declaration in sanitized HTML. The declaration regex in H…

Vulnerability class: ReDoS (Regular Expression Denial of Service)