Vendor/product archive

owasp / java_html_sanitizer CVEs

Beta · best-effort

2 CVEs tagged to owasp / java_html_sanitizer — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to owasp vendor archive

CVE-2025-66021

Published Nov 26, 2025

OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS.…

CVSS 8.6 · High

Vendor/product tagsBeta · best-effort

CVE-2021-42575

Published Oct 18, 2021

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1