https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 21:02:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-223214 EUVD-2026-223214 https://cve.radiocsirt.org/vuln/euvd-2026-223214 https://cve.radiocsirt.org/vuln/fkie_cve-2025-29771 <p>HtmlSanitizer is a client-side HTML Sanitizer. Versions prior to 2.0.3 have a cross-site scripting vulnerability when the sanitizer is used with a `contentEditable` element to set the elements `innerHTML` to a sanitized string produced by the package. If the code is particularly crafted to abuse the code beautifier, that runs AFTER sanitation. The issue is patched in version 2.0.3.</p> <p>HtmlSanitizer is a client-side HTML Sanitizer. Versions prior to 2.0.3 have a cross-site scripting vulnerability when the sanitizer is used with a `contentEditable` element to set the elements `innerHTML` to a sanitized string produced by the package. If the code is particularly crafted to abuse the code beautifier, that runs AFTER sanitation. The issue is patched in version 2.0.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-29771 https://cve.radiocsirt.org/vuln/ghsa-vhv4-fh94-jm5x <p><strong>Affected:</strong> npm: @jitbit/htmlsanitizer</p> <p>### Impact XSS vulnerability when the sanitizer is used with a `contentEditable` element to set the elements `innerHTML` to a sanitized string produced by the package. If the code is particularly crafted to abuse the code beautifier, that runs AFTER sanitation.</p> <p>### Patches Patched in version 2.0.3</p> <p><strong>Affected:</strong> npm: @jitbit/htmlsanitizer</p> <p>### Impact XSS vulnerability when the sanitizer is used with a `contentEditable` element to set the elements `innerHTML` to a sanitized string produced by the package. If the code is particularly crafted to abuse the code beautifier, that runs AFTER sanitation.</p> <p>### Patches Patched in version 2.0.3</p> https://cve.radiocsirt.org/vuln/ghsa-vhv4-fh94-jm5x