Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/html-sanitizer@2.1.2
purl pkg:composer/typo3/html-sanitizer@2.1.2
Next non-vulnerable version 2.3.2
Latest non-vulnerable version 2.3.2
Risk score 2.3
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-p5j5-4j3q-8mq8
Aliases:
CVE-2026-47345
TYPO3 HTML Sanitizer allows Cross-site Scripting Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site …
2.3.2
Not vulnerable
GHSA-jvf5-rxvv-3mcg
Aliases:
CVE-2026-47344
TYPO3 HTML Sanitizer allows Cross-site Scripting When `ALLOW_INSECURE_RAW_TEXT` is enabled, whitespace-variant closing tags (e.g., `</style\\t>`) are not recognized by the …
2.3.2
Not vulnerable
GHSA-mm79-jhqm-9j54
Aliases:
CVE-2023-47125
Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer > ### CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (4.4) ### Problem DOM processing instructions are not …
2.1.4
Vulnerable
2.1.4
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-59jf-3q9v-rh6g
By-passing Cross-Site Scripting Protection in HTML Sanitizer > ### CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (4.4) ### Problem Due to an encoding issue in … CVE-2023-38500