Search for packages
| purl | pkg:composer/symfony/html-sanitizer@8.0.13 |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-v3wm-qf9p-c549
|
Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense ### Description `Symfony\Component\HtmlSanitizer\TextSanitizer\UrlSanitizer::parse()` rejects … |
CVE-2026-48760
|
|
GHSA-x5qj-865h-mgvm
|
Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes ### Description `Symfony\Component\HtmlSanitizer\Visitor\AttributeSanitizer\UrlAttributeSanitizer::getSupportedAttributes()` enumerates the attribute names whose values are scrubbed through `UrlSanitizer::sanitize()` (scheme … |
CVE-2026-48761
|