dom-sanitizer vulnerabilities
CVEs whose affected-version data names the dom-sanitizer package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-103687High· 7.3PoCA vulnerability has been found in rhukster dom-sanitizer up to 1.0.15
A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the component SVG Sanitization. Such manipulation leads to incomplete blacklist. It is po…
CVE-2026-103686Low· 3.5PoCA flaw has been found in rhukster dom-sanitizer up to 1.0.15
A flaw has been found in rhukster dom-sanitizer up to 1.0.15. Impacted is the function DOMSanitizer::isDangerousUrl of the file src/DOMSanitizer.php of the component URL Validation. This manipulation causes cross site scripting. It is po…
CVE-2026-100370Medium· 4.7PoCDOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+
DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.15, the isDangerousUrl() method is responsible for rejecting dangerous URL values in the href and xlink:href attributes. The weakness is that "javascript:" is …