What’s Vulnerable › Products

mganss HtmlSanitizer vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your mganss HtmlSanitizer version is affected

Latest mganss HtmlSanitizer vulnerabilities

• CVE-2026-116538 — HtmlSanitizer before 9.2.1039 XSS via SanitizeDom Body and HTML Attributes (CVSS 4.7)
• CVE-2026-25543 — HtmlSanitizer has a bypass via template tag (CVSS 6.1)
• CVE-2023-44390 — HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content (CVSS 6.1)
• CVE-2020-26293 — Possible XSS bypass if style tag is allowed (CVSS 6.1)