AP
Vendor
Antisamy Project
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-23635 | AN Antisamy Antisamy Project | 6.1 | Feb 2 | AntiSamy malicious input can provoke XSS when preserving comments |
| CVE-2023-43643 | AN Antisamy Antisamy Project | 6.1 | Oct 9 | AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources |
| CVE-2022-28367 | AN Antisamy Antisamy Project | 6.1 | Apr 21 | OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input |
| CVE-2022-28366 | AN Antisamy Antisamy Project | 7.5 | Apr 21 | Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption |
| CVE-2022-29577 | AN Antisamy Antisamy Project | 6.1 | Apr 21 | OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input |
| CVE-2021-35043 | AN Antisamy Antisamy Project | 6.1 | Jul 19 | OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected) |
| CVE-2017-14735 | AN Antisamy Antisamy Project | 6.1 | Sep 25 | OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL |
| CVE-2016-10006 | AN Antisamy Antisamy Project | 6.1 | Dec 24 | In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply… |