FL
Vendor
flavorjones
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-73492 | LO loofah flavorjones | 2.3 | Aug 12 | Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons |
| CVE-2026-73491 | LO loofah flavorjones | 2.3 | Aug 12 | Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references |
| CVE-2026-73490 | LO loofah flavorjones | 4.7 | Aug 12 | Loofah: SVG `href` attribute bypasses local-reference restriction |
| CVE-2022-23516 | LO loofah flavorjones | 7.5 | Dec 14 | Uncontrolled Recursion in Loofah |
| CVE-2022-23515 | LO loofah flavorjones | 6.1 | Dec 14 | Improper neutralization of data URIs may allow XSS in Loofah |
| CVE-2022-23514 | LO loofah flavorjones | 7.5 | Dec 14 | Inefficient Regular Expression Complexity in Loofah |