Skip to content
OpenAdvisories

Package · Hex

lazy_html

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.3
    CVE-2026-92106

    lazy_html serializes SVG and MathML style and script text unescaped, allowing mutation XSS

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dashbitco lazy_html allows mutation XSS via a parse and serialize round-trip of attacker-supplied HTML. LazyHTML.to_html/2 and LazyHTML.Tree.to_html/2 decide…

    dashbitco lazy_html lazy_html Hex