Skip to main content
← NuGet

HtmlSanitizer

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 medium
Registry
NuGet

Advisories 3

  • CVE-2026-25543Medium 6.3

    HtmlSanitizer has a bypass via template tag

    Affected: fixed in 9.0.892; from 9.1.878-beta, fixed in 9.1.893-beta.

  • CVE-2023-44390Medium 6.1

    HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content

    Affected: fixed in 8.0.723; from 8.1.0-beta, fixed in 8.1.722-beta.

  • CVE-2020-26293Medium 6.1

    Possible XSS bypass if style tag is allowed

    Affected: fixed in 5.0.372.