Vulnerabilities

TI-2026-65752 CVE-2026-103687 · GHSA-xpxw-4f4p-f3h2

rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist

HIGH 70

A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00423 Published 2026-10-01 Fixed in 1.0.16 CWE-183

TI-2026-65751 CVE-2026-103686 · GHSA-qjw9-86r9-fqqc

MEDIUM 56

A flaw has been found in rhukster dom-sanitizer up to 1.0.15.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00208 Published 2026-10-01 Fixed in 1.0.16 CWE-79

TI-2026-64648 CVE-2026-100370

MEDIUM 55

DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00274 Published 2026-09-28 Fixed in 1.0.15 CWE-20

TI-2026-29079 CVE-2026-40301 · GHSA-93vf-569f-22cq

MEDIUM 55

DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00322 Published 2026-04-17 Fixed in 1.0.10 CWE-79