Log in Start free

rhukster

Products

ProductCVEsExploitedLatest
dom-sanitizer4–Oct 1, 2026

Exploited and recent CVEs

  • CVE-2026-103687 High 7.3 rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist 0.4%
  • CVE-2026-103686 Low 3.5 rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting 0.2%
  • CVE-2026-100370 Medium 4.7 DOMSanitizer - Incomplete data: URL Sanitization in DOMSanitizer::isDangerousUrl() Allows Base64-Encoded Payloads to Bypass href and xlink:href Validation 0.3%
  • CVE-2026-40301 Medium 4.7 rhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directives 0.3%