CVE-2026-5751 : 詳細

CVE-2026-5751

6.1
/
中
2026-08-23
14h16 +00:00
Cross-site Scripting
A03-Injection
Network
2026-10-12
16h10 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting (mXSS) vulnerability when using a custom SanitizationPolicy that preserves foreign namespaces (e.g., drop_foreign_namespaces=False with allowlisted SVG/MathML elements or raw-text containers such as