Search for packages
| purl | pkg:composer/typo3/html-sanitizer@2.0.12 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-hvwx-qh2h-xcfj
Aliases: CVE-2022-23499 GMS-2022-8136 |
TYPO3 HTML Sanitizer vulnerable to Cross-Site Scripting ### Problem Due to a parsing issue in the upstream package [`masterminds/html5`](https://packagist.org/packages/masterminds/html5), malicious … |
Vulnerable |
|
GHSA-47m6-46mj-p235
Aliases: CVE-2022-36020 |
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7) ### Problem Due to a … |
Vulnerable |
|
GHSA-59jf-3q9v-rh6g
Aliases: CVE-2023-38500 |
By-passing Cross-Site Scripting Protection in HTML Sanitizer > ### CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (4.4) ### Problem Due to an encoding issue in … |
Vulnerable |
|
GHSA-p5j5-4j3q-8mq8
Aliases: CVE-2026-47345 |
TYPO3 HTML Sanitizer allows Cross-site Scripting Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site … |
Not vulnerable |
|
GHSA-jvf5-rxvv-3mcg
Aliases: CVE-2026-47344 |
TYPO3 HTML Sanitizer allows Cross-site Scripting When `ALLOW_INSECURE_RAW_TEXT` is enabled, whitespace-variant closing tags (e.g., `</style\\t>`) are not recognized by the … |
Not vulnerable |
|
GHSA-mm79-jhqm-9j54
Aliases: CVE-2023-47125 |
Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer > ### CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (4.4) ### Problem DOM processing instructions are not … |
Vulnerable Vulnerable |