xhtml-purifier vulnerabilities

CVEs whose affected-version data names the xhtml-purifier package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-61784Medium· 6.1

yesterday

xhtml-purifier is a Node.js library to take in raw/unknown/untrusted HTML and output cleaned, purified, trusted HTML

xhtml-purifier is a Node.js library to take in raw/unknown/untrusted HTML and output cleaned, purified, trusted HTML. Versions prior to 0.4.3 do not HTML-entity-encode attribute values when serializing its sanitized output. In attributeS…

▾ Sunlitxhtml-purifier · xhtml-purifiervia NVD