Known vulnerabilities in Java HTML Sanitizer

Vendor: OWASP
Software: Java HTML Sanitizer
Software CPE: cpe:2.3:a:owasp:java_html_sanitizer:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Java HTML Sanitizer Java HTML Sanitizer is affected by 5 known vulnerabilities: 4 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152248 - Uncontrolled Recursion
 CWE-674 Medium
No
No
 20260924.1 25.09.2026 SB20260925260
#VU152249 - Inefficient Algorithmic Complexity
 CWE-407 Medium
No
No
 20260924.1 25.09.2026 SB20260925260
#VU152247 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Medium
No
No
 20260922.1 25.09.2026 SB20260925259
#VU152246 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Medium
No
No
 20260921.1 25.09.2026 SB20260925258
#VU123020 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-66021		 CWE-79 Low
No
No
 20260101.1 18.02.2026 SB2026021830
SB2026021863
SB2026040913