JA
Product
java-html-sanitizer
by OWASP · last CVE Nov 26, 2025
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch

Add java-html-sanitizer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-66021
6.1
0%
Nov 26
OWASP Java HTML Sanitizer is vulnerable to XSS via noscript tag and improper style tag sanitization
Affected: = 20240325.1
Showing 1