[vulnfeed] 3 critical CVEs — 2026-08-23 16:00 UTC
vulnfeed
Critical alert — 2026-08-23 16:48 UTC
3 new critical CVEs
in the last 5 hours — 3 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-5388CRITICAL
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_ur
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passthrough=True), and sev
CVSS 9.3
CVE-2026-7808CRITICAL
justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous conte
justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style) to survive sanitization, potentially leading to cross-site scri
CVSS 9.3
CVE-2026-8445CRITICAL
justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle br
justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle brackets) in text nodes when converting a parsed document to Markdown via to_markdown(). Whi
CVSS 9.3
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: