CVE-2026-25543
1 advisory.
NuGet/HtmlSanitizer CVE-2026-25543: medium
HtmlSanitizer has a bypass via template tag
Action: Upgrade HtmlSanitizer to 9.0.892 (9.0.x) or 9.1.893-beta (9.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.0.892 | - |
| 9.1.878-beta | 9.1.893-beta | - |
Fixed versions
| 9.0.892 | 9.1.893-beta |
Sources
- osv: GHSA-j92c-7v7g-gj3f
- https://github.com/mganss/HtmlSanitizer/security/advisories/GHSA-j92c-7v7g-gj3f
- https://nvd.nist.gov/vuln/detail/CVE-2026-25543
- https://github.com/mganss/HtmlSanitizer/commit/0ac53dca30ddad963f2b243669a5066933d82b81
- https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/template
- https://github.com/mganss/HtmlSanitizer
- https://github.com/mganss/HtmlSanitizer/releases/tag/v9.0.892
- https://www.nuget.org/packages/HtmlSanitizer/9.0.892
- https://www.nuget.org/packages/HtmlSanitizer/9.1.893-beta
CVE-2026-25543 · published · modified · JSON