Advisories · Technology

Wikimedia Foundation Parsoid.

Every CVE that names Wikimedia Foundation Parsoid among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-61638 CVE record

CVSS 0.0 None

Sanitizer::validateAttributes data-XSS
- Wikimedia Foundation MediaWiki
- Wikimedia Foundation Parsoid
- Cross-site scripting (XSS)
Not analysed yet 2 Feb 2026
CVE-2025-32699 CVE record

CVSS 2.1 Low

Potential javascript injection attack enabled by Unicode normalization in Action API
- Wikimedia Foundation MediaWiki
- Wikimedia Foundation Parsoid
- Other injection
- Cross-site scripting (XSS)
Not analysed yet 10 Apr 2025