Htmlsanitizeex vulnerabilities

2 known vulnerabilities in Htmlsanitizeex from Rrrene. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  html_sanitize_ex: Inefficient Algorithmic Complexity

  CVE-2026-68750Aug 6, 2026Rrrene

  Inefficient Algorithmic Complexity vulnerability in the traversal engine in rrrene html_sanitize_ex allows an unauthenticated remote attacker to exhaust server CPU and memory via a flat run of sibling elements in sanitized HTML. The list clause of HtmlSanitize

• 7.5 High severity

  html_sanitize_ex: Inefficient Regular Expression Complexity

  CVE-2026-68749Aug 6, 2026Rrrene

  Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to exhaust server CPU via a long CSS declaration in sanitized HTML. The declaration regex in HtmlSanitizeEx.Scrubbe