Security
فارسی
All products

justhtml

PyPI · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Uncontrolled recursion DoS in JustHTML() via deeply nested HTMLCVE-2026-9769 · GHSA-V7CF-C9RM-WM3JVersion ranges need review. justhtml PyPI High Fix reported
justhtml has sanitization bypass in custom policies and programmatic DOMCVE-2026-6827 · GHSA-VRX2-77F2-WW34 justhtml PyPI Medium Fix reported
justhtml includes multiple security fixesCVE-2026-5388 · GHSA-C9VM-HV86-F23R justhtml PyPI Medium Fix reported
JustHTML is vulnerable to XSS via code fence breakout in <pre> contentCVE-2026-5389 · GHSA-5VP3-3CG6-2RQ3 justhtml PyPI High Fix reported
JustHTML has a Sanitizer Bypass (in Markdown)CVE-2026-8445 · GHSA-3RCM-VJRC-P45J justhtml PyPI Medium Fix reported
JustHTML Affected by Mutation XSS via Literal Text Serialization in Raw Text Elements (style/script)CVE-2026-8630 · GHSA-QVC2-MG72-JJHX justhtml PyPI Medium Fix reported
justhtml: to_markdown() code-span blank-line breakout enables XSSCVE-2026-77088 · GHSA-JF6W-2MVX-633J justhtml PyPI Medium Fix reported
justhtml introduces denial-of-service hardeningCVE-2026-4671 · GHSA-R8CJ-3554-33MR justhtml PyPI Low Fix reported
Multiple security fixes in justhtmlCVE-2026-7808 · GHSA-4P64-V8F5-R2GX justhtml PyPI Low Fix reported
justhtml: Mutation XSS with custom foreign-namespace sanitization policiesCVE-2026-5751 · GHSA-R758-8HXW-4845 justhtml PyPI Low Fix reported