Skip to content
OpenAdvisories

Package · Hex

html_sanitize_ex

6 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.8

    html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijacking

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to retarget a form already on the rendering page and receive whatever the victim submits, including cr…