Advisories · Technology

rhukster dom-sanitizer.

Every CVE that names rhukster dom-sanitizer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103687 CVE record

CVSS 6.9 Medium

rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist
- rhukster dom-sanitizer
- CWE-183
- CWE-184
Not analysed yet 1 Oct 2026
CVE-2026-103686 CVE record

CVSS 5.1 Medium

rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting
- rhukster dom-sanitizer
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 1 Oct 2026
CVE-2026-100370 CVE record

CVSS 4.7 Medium

DOMSanitizer - Incomplete data: URL Sanitization in DOMSanitizer::isDangerousUrl() Allows Base64-Encoded Payloads to Bypass href and xlink:href Validation
- rhukster dom-sanitizer
- CWE-20
Not analysed yet 28 Sept 2026