Wikimedia Foundation Parsoid

• CVE-2025-61638 None 0.0 Sanitizer::validateAttributes data-XSS 0.3%
• CVE-2025-32699 Low 2.1 Potential javascript injection attack enabled by Unicode normalization in Action API 0.4%