CWE-1007

CVEs classified under CWE-1007, newest first.

1 CVERSS

CVE-2026-48760Medium

Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense

Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense

▾ Sunlitsymfony · symfony/html-sanitizerEPSS 0.34%via GHSA

CWE-1007 vulnerabilities (CVEs) · VulnSea