Known Vulnerabilities for Sanitize-html by Apostrophecms
Listed below are 5 of the newest known vulnerabilities associated with "Sanitize-html" by "Apostrophecms".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57958 json | Mixpost through 2.6.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execut... | Not Provided | 2026-06-29 | 2026-06-29 |
| CVE-2026-56397 json | SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious pack... | Not Provided | 2026-06-21 | 2026-06-24 |
| CVE-2026-56395 json | SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious pack... | Not Provided | 2026-06-21 | 2026-06-22 |
| CVE-2026-56356 json | n8n contains a stored cross-site scripting vulnerability in the Chat Trigger node's Custom CSS field due to a misconfiguratio... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-55661 json | Tina is a headless content management system. In versions prior to @tinacms/mdx 2.1.7 and tinacms 3.9.3, rich-text parsing ... | Not Provided | 2026-07-01 | 2026-07-06 |
| CVE-2026-55464 json | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, CommonMark escapes raw HTML but does not sanitize javascri... | Not Provided | 2026-07-10 | 2026-07-13 |
| CVE-2026-54002 json | Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites and plugins that use the writer or l... | Not Provided | 2026-07-09 | 2026-07-09 |
| CVE-2026-53606 json | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a ... | Not Provided | 2026-06-12 | 2026-06-15 |
| CVE-2026-48822 json | Shaarli is a personal bookmarking service. Versions 0.16.1 and prior contain a stored Cross-Site Scripting (XSS) vulnerabilit... | Not Provided | 2026-06-17 | 2026-06-18 |
| CVE-2026-44990 json | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a ... | Not Provided | 2026-06-12 | 2026-07-09 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Apostrophecms | Sanitize-html | 2.3.2 | |||
| Application | Apostrophecms | Sanitize-html | 2.3.1 | |||
| Application | Apostrophecms | Sanitize-html | 2.3.0 | |||
| Application | Apostrophecms | Sanitize-html | 2.2.0 | |||
| Application | Apostrophecms | Sanitize-html | 2.1.2 | |||
| Application | Apostrophecms | Sanitize-html | 2.1.1 | |||
| Application | Apostrophecms | Sanitize-html | 2.1.0 | |||
| Application | Apostrophecms | Sanitize-html | 2.0.0 | |||
| Application | Apostrophecms | Sanitize-html | 1.9.0 | |||
| Application | Apostrophecms | Sanitize-html | 1.8.0 | |||
| Application | Apostrophecms | Sanitize-html | 1.7.2 | |||
| Application | Apostrophecms | Sanitize-html | 1.7.1 | |||
| Application | Apostrophecms | Sanitize-html | 1.7.0 | |||
| Application | Apostrophecms | Sanitize-html | 1.6.1 | |||
| Application | Apostrophecms | Sanitize-html | 1.6.0 | |||
| Application | Apostrophecms | Sanitize-html | 1.5.3 | |||
| Application | Apostrophecms | Sanitize-html | 1.5.2 | |||
| Application | Apostrophecms | Sanitize-html | 1.5.1 | |||
| Application | Apostrophecms | Sanitize-html | 1.5.0 | |||
| Application | Apostrophecms | Sanitize-html | 1.4.3 |