Justhtml
EmilStenstrom · 11 CVEs
justhtml before 1.10.0 Denial of Service via deeply nested HTML
Aug 23, 2026
justhtml before 1.12.0 Mutation XSS via Raw Text Elements
Aug 23, 2026
justhtml before 1.12.0 Sanitizer Bypass via Markdown
Aug 23, 2026
justhtml before 1.16.0 Multiple Security Issues via Sanitization
Aug 23, 2026
justhtml 0.9.0 through 1.21.0 Cross-Site Scripting via code-span
Aug 23, 2026
justhtml before 3.11.0 XSS via selectedcontent projection
Aug 23, 2026
justhtml before 1.17.0 Multiple Cross-Site Scripting Vulnerabilities
Aug 23, 2026
justhtml before 1.14.0 Mutation XSS via custom sanitization policies
Aug 23, 2026
justhtml before 1.13.0 XSS via code fence breakout
Aug 23, 2026
justhtml before 1.15.0 Multiple Security Issues
Aug 23, 2026
justhtml before 1.18.0 Denial of Service via CSS Selector
Aug 23, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-9769 | justhtml before 1.10.0 Denial of Service via deeply nested HTML | HIGH | 0.49% | Aug 23, 2026 |
| CVE-2026-8630 | justhtml before 1.12.0 Mutation XSS via Raw Text Elements | MEDIUM | 0.26% | Aug 23, 2026 |
| CVE-2026-8445 | justhtml before 1.12.0 Sanitizer Bypass via Markdown | CRITICAL | 0.64% | Aug 23, 2026 |
| CVE-2026-7808 | justhtml before 1.16.0 Multiple Security Issues via Sanitization | CRITICAL | 0.59% | Aug 23, 2026 |
| CVE-2026-77088 | justhtml 0.9.0 through 1.21.0 Cross-Site Scripting via code-span | MEDIUM | 0.26% | Aug 23, 2026 |
| CVE-2026-74793 | justhtml before 3.11.0 XSS via selectedcontent projection | MEDIUM | 0.29% | Aug 23, 2026 |
| CVE-2026-6827 | justhtml before 1.17.0 Multiple Cross-Site Scripting Vulnerabilities | MEDIUM | 0.26% | Aug 23, 2026 |
| CVE-2026-5751 | justhtml before 1.14.0 Mutation XSS via custom sanitization policies | MEDIUM | 0.26% | Aug 23, 2026 |
| CVE-2026-5389 | justhtml before 1.13.0 XSS via code fence breakout | MEDIUM | 0.26% | Aug 23, 2026 |
| CVE-2026-5388 | justhtml before 1.15.0 Multiple Security Issues | CRITICAL | 0.59% | Aug 23, 2026 |
| CVE-2026-4671 | justhtml before 1.18.0 Denial of Service via CSS Selector | HIGH | 0.65% | Aug 23, 2026 |
Showing 1 to 11 of 11 CVEs