PyPI/justhtml CVE-2026-8445: medium, EPSS 0.64%

JustHTML has a Sanitizer Bypass (in Markdown)

Action: Upgrade justhtml to 1.12.0 or later.

pip install justhtml==1.12.0

Affected

Fixed versions

Sources

• osv: GHSA-3rcm-vjrc-p45j
• https://github.com/EmilStenstrom/justhtml/security/advisories/GHSA-3rcm-vjrc-p45j
• https://github.com/EmilStenstrom/justhtml

CVE-2026-8445 · published 2026-03-18T20:19:56Z · modified 2026-08-24T03:56:00.500786004Z · JSON