Emilstenstrom Justhtml
4 CVEs affecting Emilstenstrom Justhtml. Latest disclosed: 2026-08-23. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-8445 | Critical | 9.8 | 2026-08-23 | justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle brackets) in text nodes when converting a parsed do… |
CVE-2026-9769 | High | 7.5 | 2026-08-23 | justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML() construction, TreeBuilder.fini… |
CVE-2026-8630 | Medium | 6.1 | 2026-08-23 | justhtml before 1.12.0 (versions <= 1.11.0) contains a mutation cross-site scripting (mXSS) vulnerability in the serialization of raw-text elements such as <st… |
CVE-2026-74793 | Medium | 6.1 | 2026-08-23 | justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler removal in selectedcontent projections… |