HtmlUnit
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| htmlunit | 1 | – | Dec 4, 2023 |
| htmlunit-neko | 1 | – | Oct 15, 2026 |
Exploited and recent CVEs
- CVE-2026-104828 HtmlUnit Neko: Mutation XSS (mXSS) in HTMLWriterFilter - TEXTAREA/TITLE entity decode without re-encode 0.3%
- CVE-2023-49093 HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL 2.4%