Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/html-sanitizer@2.2.0
purl pkg:composer/typo3/html-sanitizer@2.2.0
Next non-vulnerable version 2.3.2
Latest non-vulnerable version 2.3.2
Risk score 2.3
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-p5j5-4j3q-8mq8
Aliases:
CVE-2026-47345
TYPO3 HTML Sanitizer allows Cross-site Scripting Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site …
2.3.2
Not vulnerable
GHSA-jvf5-rxvv-3mcg
Aliases:
CVE-2026-47344
TYPO3 HTML Sanitizer allows Cross-site Scripting When `ALLOW_INSECURE_RAW_TEXT` is enabled, whitespace-variant closing tags (e.g., `</style\\t>`) are not recognized by the …
2.3.2
Not vulnerable
This package is not known to fix any advisories.