Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Satellite 6/nodejs-sanitize-html
Red Hat
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render
CVE-2026-113654 · GHSA-X3Q4-9HXX-GX8M
sanitize-html
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
Medium
Fix reported
2026-10-20
PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
CVE-2026-45623 · GHSA-6G55-P6WH-862Q
postcss
Migration Toolkit for Containers/rhmtc/openshift-migration-ui-rhel8
npm
Red Hat
High
Fix reported
2026-09-10
PostCSS has XSS via Unescaped </style> in its CSS Stringify Output
CVE-2026-41305 · GHSA-QX2V-QP2M-JG93
postcss
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Medium
Fix reported
2026-09-10
ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypass
CVE-2026-84371 · GHSA-G8QQ-57P8-GGW5
sanitize-html
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
Medium
Fix reported
2026-09-10
PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset
CVE-2026-69153 · GHSA-FXQJ-RQCC-2CMP
postcss
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Medium
Fix reported
2026-09-10
postcss-selector-parser allows denial of service through uncontrolled AST recursion
CVE-2026-9358 · GHSA-W9M9-85WC-3X92
postcss-selector-parser
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Low
Fix reported
2026-09-10
sanitize-html has incomplete URI scheme validation in that allows javascript: URIs through action, formaction, data, poster, and background attributes
CVE-2026-53606 · GHSA-VCCV-CMXP-4J9H
sanitize-html
Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9
npm
Red Hat
Medium
Fix reported
2026-08-01
sanitize-html allowedTags Bypass via Entity-Decoded Text in nonTextTags Elements
CVE-2026-40186 · GHSA-9MRH-V2V3-XPFM
sanitize-html
Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9
npm
Red Hat
Medium
Fix reported
2026-04-17
