Known vulnerabilities in Java HTML Sanitizer 223

Vendor: OWASP
Version: 223
Software CPE: cpe:2.3:a:owasp:java_html_sanitizer:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Java HTML Sanitizer version 223 Java HTML Sanitizer 223 is affected by 4 vulnerabilities: 4 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152248 - Uncontrolled Recursion
CWE-674 Medium
No
No
20260924.1 25.09.2026 SB20260925260
#VU152249 - Inefficient Algorithmic Complexity
CWE-407 Medium
No
No
20260924.1 25.09.2026 SB20260925260
#VU152247 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
20260922.1 25.09.2026 SB20260925259
#VU152246 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
20260921.1 25.09.2026 SB20260925258