rhukster dom-sanitizer

• CVE-2026-103687 High 7.3 rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist 0.4%
• CVE-2026-103686 Low 3.5 rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting 0.2%
• CVE-2026-100370 Medium 4.7 DOMSanitizer - Incomplete data: URL Sanitization in DOMSanitizer::isDangerousUrl() Allows Base64-Encoded Payloads to Bypass href and xlink:href Validation 0.3%
• CVE-2026-40301 Medium 4.7 rhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directives 0.3%