Product · OWASP

java-html-sanitizer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.6

CVE-2025-66021

OWASP Java HTML Sanitizer is vulnerable to XSS via noscript tag and improper style tag sanitization

OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS. In version 20240325.1, OWASP java html sanitizer is vulnerable to XSS if HtmlPo…

OWASP java-html-sanitizer com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer Maven

Nov 26, 2025