Known vulnerabilities in Java HTML Sanitizer 20260921.1

Vendor: OWASP
Version: 20260921.1
Software CPE: cpe:2.3:a:owasp:java_html_sanitizer:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Java HTML Sanitizer version 20260921.1 Java HTML Sanitizer 20260921.1 is affected by 3 vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152248 - Uncontrolled Recursion
CWE-674 Medium
No
No
20260924.1 25.09.2026 SB20260925260
#VU152249 - Inefficient Algorithmic Complexity
CWE-407 Medium
No
No
20260924.1 25.09.2026 SB20260925260
#VU152247 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
20260922.1 25.09.2026 SB20260925259