Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-26539

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-rjqq-98f6-6j3r

Improper Input Validation in sanitize-html Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option.

gitlab/npm/sanitize-html/CVE-2021-26539

Origin Validation Error sanitize-html does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass the hostname allowlist validation set by the `allowedIframeHostnames` option.