Vulnerabilities

TI-2026-20652 CVE-2026-25543 · GHSA-j92c-7v7g-gj3f

HtmlSanitizer has a bypass via template tag

LOW 34

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00274 Published 2026-02-04 Fixed in 9.0.892, 9.1.893-beta CWE-116

TI-2023-23896 CVE-2023-44390 · GHSA-43cp-6p3q-2pc4

LOW 27

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00416 Published 2023-10-05 Fixed in 8.0.723, 8.1.722-beta CWE-79

TI-2020-16114 CVE-2020-26293 · GHSA-8j9v-h2vp-2hhv

LOW 29

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0101 Published 2021-01-04 Fixed in 5.0.372 CWE-74