Skip to content
Threat Feed
Subscribe

Tag

Sanitization

3 briefs RSS
critical advisory

sanitize-html XSS Vulnerability via XMP Tag Bypass (CVE-2026-44990)

sanitize-html version 2.17.3 and earlier is vulnerable to cross-site scripting (XSS) due to the improper handling of the `xmp` tag, allowing attackers to inject arbitrary HTML and JavaScript code.

sanitize-html xss javascript sanitization
2r 1t
high advisory

Novu XSS Vulnerability via Incomplete Sanitization

A cross-site scripting (XSS) vulnerability exists in Novu due to incomplete sanitization of HTML attributes in email previews, allowing arbitrary JavaScript execution.

Novu xss cross-site-scripting sanitization
2r 1t
high advisory

OpenClaw Inconsistent Host Exec Environment Override Sanitization

OpenClaw versions before 2026.3.22 have an inconsistent host execution environment override sanitization, allowing blocked or malformed override keys to bypass sanitization, which could lead to unauthorized access or code execution.

OpenClaw sanitization vulnerability
2r 1t