Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
rhukster/dom-sanitizer
rhukster/dom-sanitizer vulnerabilities (Packagist)
2 vulnerabilities.
rhukster/dom-sanitizer
Packagist
rhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directives
CVE-2026-40301
Fix available
4.7
Medium
April 10, 2026
rhukster/dom-sanitizer
Packagist
Cross-site Scripting in DOMSanitizer
CVE-2023-49146
Fix available
6.1
Medium
November 22, 2023
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open