What’s Vulnerable › Products

OWASP java-html-sanitizer vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your OWASP java-html-sanitizer version is affected

Latest OWASP java-html-sanitizer vulnerabilities

• CVE-2025-66021 — OWASP Java HTML Sanitizer is vulnerable to XSS via noscript tag and improper style tag sanitization (CVSS 6.1)
• CVE-2021-42575 — (CVSS 9.8)