Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: EmilStenstrom justhtml 1.12.0 Clear all filters
TI-2026-07586 CVE-2026-8630 · GHSA-rc3v-3cc7-h7h5

justhtml before 1.12.0 Mutation XSS via Raw Text Elements

Priority LOW 23

justhtml before 1.12.0 (versions <= 1.11.0) contains a mutation cross-site scripting (mXSS) vulnerability in the serialization of raw-text elements such as <style> and <script>.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00263 Published 2026-08-23 Fixed in 1.12.0 CWE-79
TI-2026-07422 CVE-2026-8445 · GHSA-wf6m-786j-gxrr

justhtml before 1.12.0 Sanitizer Bypass via Markdown

Priority HIGH 81

justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle brackets) in text nodes when converting a parsed document to Markdown via to_markdown().

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00635 Published 2026-08-23 Fixed in 1.12.0 CWE-79