unhead vulnerabilities (TuxCare)

3 vulnerabilities.

• unhead TuxCare Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe() CVE-2026-39315 Fix available 6.1 MediumApril 9, 2026
• unhead TuxCare Unhead has a Bypass of URI Scheme Sanitization in makeTagSafe via Case-Sensitivity CVE-2026-31873 Fix available 0.0 NoneMarch 12, 2026
• unhead TuxCare Unhead has a XSS bypass in `useHeadSafe` via attribute name injection and case-sensitive protocol check CVE-2026-31860 Fix available 5.3 MediumMarch 12, 2026