Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-47345
Not yet scoredAwaiting CVSS assessment
Published
June 8, 2026
Affected
1 project
Assigned by
f4fb688c-4412-4426-b4b8-421ecf27b14a
Description
Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.
TYPO3/html-sanitizer
GitHubHTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values.
GitHubHTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values.NVD