Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/html-sanitizer@1.5.3
purl pkg:composer/typo3/html-sanitizer@1.5.3
Next non-vulnerable version 2.3.2
Latest non-vulnerable version 2.3.2
Risk score 2.3
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-p5j5-4j3q-8mq8
Aliases:
CVE-2026-47345
TYPO3 HTML Sanitizer allows Cross-site Scripting Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site …
2.3.2
Not vulnerable
GHSA-jvf5-rxvv-3mcg
Aliases:
CVE-2026-47344
TYPO3 HTML Sanitizer allows Cross-site Scripting When `ALLOW_INSECURE_RAW_TEXT` is enabled, whitespace-variant closing tags (e.g., `</style\\t>`) are not recognized by the …
2.3.2
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-mm79-jhqm-9j54
Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer > ### CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (4.4) ### Problem DOM processing instructions are not … CVE-2023-47125