emilstenstrom/justhtml Security Advisories | GitStock

medium2026-06-25

justhtml: to_markdown() code-span blank-line breakout enables XSS

GHSA-jf6w-2mvx-633j

low2026-05-08

justhtml introduces denial-of-service hardening

GHSA-r8cj-3554-33mr

medium2026-04-22

justhtml has sanitization bypass in custom policies and programmatic DOM

GHSA-vrx2-77f2-ww34

low2026-04-14

Multiple security fixes in justhtml

GHSA-4p64-v8f5-r2gx

medium2026-04-10

justhtml includes multiple security fixes

GHSA-c9vm-hv86-f23r

low2026-04-08

justhtml: Mutation XSS with custom foreign-namespace sanitization policies

GHSA-r758-8hxw-4845

high2026-03-24

JustHTML is vulnerable to XSS via code fence breakout in <pre> content

GHSA-5vp3-3cg6-2rq3

medium2026-03-18

JustHTML has a Sanitizer Bypass (in Markdown)

GHSA-3rcm-vjrc-p45j

medium2026-03-18

JustHTML Affected by Mutation XSS via Literal Text Serialization in Raw Text Elements (style/script)

GHSA-qvc2-mg72-jjhx

high2026-03-17

Uncontrolled recursion DoS in JustHTML() via deeply nested HTML

GHSA-v7cf-c9rm-wm3j · CVE-2026-9769