Veille CVE

Recherche « TYPO3 HTML Sanitizer »

2 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « TYPO3 HTML Sanitizer » ✕
  1. CVE-2026-47345 5.1 Moyenne

    TYPO3 HTML Sanitizer

    Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.

  2. CVE-2026-47344 2.1 Faible

    TYPO3 HTML Sanitizer

    When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing subsequent content to escape sanitization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.