Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

hex

html_sanitize_ex

hex

HTML sanitizer for Elixir

View on github.com · View on hex.pm

Security Advisories for html_sanitize_ex in hex

High
about 5 hours ago

Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of service EEF-CVE-2026-68750

hex html_sanitize_ex
High
about 5 hours ago

Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service EEF-CVE-2026-68749

hex html_sanitize_ex
Low
about 5 hours ago

CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration input EEF-CVE-2026-68747

hex html_sanitize_ex
Low
about 5 hours ago

html_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirection EEF-CVE-2026-66829

hex html_sanitize_ex
Medium
about 5 hours ago

html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijacking EEF-CVE-2026-66370

hex html_sanitize_ex
Low
about 5 hours ago

html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embedding EEF-CVE-2026-66843

hex html_sanitize_ex

Filter by Severity

Low 3 High 2 Medium 1