CVE-2026-6827
6.1
/ 中危
2026-08-23
14h16 +00:00
14h16 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling. When custom policies preserve foreign namespaces (SVG/MathML), dangerous content such as HTML integration points (SVG , MathML ) and mutation-XSS parser-differential payloads could survive sanitization and become active HTML after reparse; SVG filter="url(...)" and preserved