Skip to content
OpenAdvisories

Package · PyPI

justhtml

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-9769

    justhtml before 1.10.0 Denial of Service via deeply nested HTML

    justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML() construction, TreeBuilder.finish() unconditionally calls _populate_selectedcontent(), which recursively traverses the DOM tree via…

    EmilStenstrom justhtml justhtml PyPI
  • High 7.5
    CVE-2026-4671

    justhtml before 1.18.0 Denial of Service via CSS Selector

    justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkification. Applications that evaluate attacker-controlled selector strings (via query(), matches(), or selector-based transforms), run selector mat…

    EmilStenstrom justhtml justhtml PyPI