Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

rhukster vulnerabilities

4 published CVEs name rhukster among the affected products.

Newest CVEs

  • CVE-2026-103687

    rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist

    rhukster · dom-sanitizer

    Medium6.9
  • CVE-2026-103686

    rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting

    rhukster · dom-sanitizer

    Medium5.1
  • CVE-2026-100370

    DOMSanitizer - Incomplete data: URL Sanitization in DOMSanitizer::isDangerousUrl() Allows Base64-Encoded Payloads to Bypass href and xlink:href Validation

    rhukster · dom-sanitizer

    Medium4.7
  • CVE-2026-40301

    rhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directives

    rhukster · dom-sanitizer

    Medium4.7