Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/html-sanitizer@1.5.1
purl pkg:composer/typo3/html-sanitizer@1.5.1
Next non-vulnerable version 1.5.3
Latest non-vulnerable version 2.1.4
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-jm95-52f4-mqfe
Aliases:
CVE-2023-47125
GHSA-mm79-jhqm-9j54
Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versions 1.5.3 and 2.1.4. Users are advised to upgrade. There are no known workarounds for this vulnerability.
1.5.3
Affected by 0 other vulnerabilities.
2.1.4
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-ntv8-t4pv-hfa6 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') TYPO3 HTML Sanitizer is an HTML sanitizer, written in PHP, aiming to provide cross-site-scripting-safe markup based on explicitly allowed tags, attributes and values. Starting in version 1.0.0 and prior to versions 1.5.1 and 2.1.2, due to an encoding issue in the serialization layer, malicious markup nested in a `noscript` element was not encoded correctly. `noscript` is disabled in the default configuration, but might have been enabled in custom scenarios. This allows bypassing the cross-site scripting mechanism of TYPO3 HTML Sanitizer. Versions 1.5.1 and 2.1.2 fix the problem. CVE-2023-38500
GHSA-59jf-3q9v-rh6g

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T22:43:20.856778+00:00 GitLab Importer Affected by VCID-jm95-52f4-mqfe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/html-sanitizer/CVE-2023-47125.yml 38.4.0
2026-04-12T00:02:55.532562+00:00 GitLab Importer Affected by VCID-jm95-52f4-mqfe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/html-sanitizer/CVE-2023-47125.yml 38.3.0
2026-04-03T00:07:36.664224+00:00 GitLab Importer Affected by VCID-jm95-52f4-mqfe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/html-sanitizer/CVE-2023-47125.yml 38.1.0
2026-04-02T16:59:59.141816+00:00 GHSA Importer Fixing VCID-ntv8-t4pv-hfa6 https://github.com/advisories/GHSA-59jf-3q9v-rh6g 38.1.0
2026-04-01T12:59:03.890295+00:00 GithubOSV Importer Fixing VCID-ntv8-t4pv-hfa6 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/07/GHSA-59jf-3q9v-rh6g/GHSA-59jf-3q9v-rh6g.json 38.0.0
2026-04-01T12:51:37.294357+00:00 GitLab Importer Fixing VCID-ntv8-t4pv-hfa6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/html-sanitizer/CVE-2023-38500.yml 38.0.0