Skip to content
Threat Feed
Subscribe

Vendor

JustHTML

2 briefs RSS
critical advisory

Multiple Sanitization Bypass Vulnerabilities in justhtml Library

The justhtml library before version 1.15.0 contains multiple vulnerabilities in URL sanitization, HTML serialization, and Markdown passthrough that allow attackers to inject malicious HTML and JavaScript.

justhtml +2 xss injection library-vulnerability
3t 1c
high advisory

JustHTML XSS Vulnerability via Code Fence Breakout

JustHTML versions 1.12.0 and earlier are vulnerable to cross-site scripting (XSS) by manipulating the contents of a <pre> element to inject HTML code outside of the intended code block, potentially leading to arbitrary JavaScript execution.

JustHTML xss markdown
2r 1t