Packages

html_sanitize_ex

1.5.4
1.5.4 1.5.3 1.5.2 1.5.1 1.5.0 1.5.0-rc.0 1.4.4 1.4.4-rc.0 1.4.3 1.4.2 1.4.1 1.4.0 1.3.0 1.3.0-rc3 1.3.0-rc2 1.3.0-rc1 1.2.0 1.1.1 1.1.0 1.1.0-rc1 1.0.1 1.0.0 0.3.1 0.3.0 0.2.1 0.2.0 0.1.2 0.1.1 0.1.0

HTML sanitizer for Elixir

HexDocs

Current section

6 Advisories

Jump to
Readme
29 Versions
1 Dependency
25 Dependants
6 Advisories
Files
Activity
EEF-CVE-2026-68750 CVE-2026-68750 GHSA-463q-p2fr-mh9p

Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of service

August 06, 2026
CVSS
?
8.2 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.3.1 and < 1.5.3
EEF-CVE-2026-68749 CVE-2026-68749 GHSA-4cx2-987x-rr2x

Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service

August 06, 2026
CVSS
?
8.2 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.3.1 and < 1.5.3
EEF-CVE-2026-68747 CVE-2026-68747 GHSA-87v2-pfhj-r5x7

CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration input

August 06, 2026
CVSS
?
2.3 / 10.0 Low
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Affected Versions

>= 0.3.1 and < 1.5.4
EEF-CVE-2026-66829 CVE-2026-66829 GHSA-2c6f-3j54-xpcr

html_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirection

August 06, 2026
CVSS
?
2.3 / 10.0 Low
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

Affected Versions

>= 0.3.1 and < 1.5.3
EEF-CVE-2026-66370 CVE-2026-66370 GHSA-w3f9-jjhw-wwvq

html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijacking

August 06, 2026
CVSS
?
4.8 / 10.0 Medium
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N

Affected Versions

>= 0.3.1 and < 1.5.3
EEF-CVE-2026-66843 CVE-2026-66843 GHSA-xmm9-jc22-rcgj

html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embedding

August 06, 2026
CVSS
?
2.3 / 10.0 Low
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Affected Versions

>= 0.3.1 and < 1.5.3

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 2K 4K 6K 8K

this version

0

yesterday

6 997

last 7 days

39 240

all time

8 444 462

Last Updated

Aug 06, 2026

License

MIT

Build Tools

mix

Publisher

rrrene rrrene

Links

Owners