What’s Vulnerable › Products

rhukster dom-sanitizer vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your rhukster dom-sanitizer version is affected

Latest rhukster dom-sanitizer vulnerabilities

• CVE-2026-103687 — rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist (CVSS 7.3)
• CVE-2026-103686 — rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting (CVSS 3.5)
• CVE-2026-100370 — DOMSanitizer - Incomplete data: URL Sanitization in DOMSanitizer::isDangerousUrl() Allows Base64-Encoded Payloads to Bypass href and xlink:href Validation (CVSS 4.7)
• CVE-2026-40301 — rhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directives (CVSS 4.7)