rrrene vulnerabilities
6 published CVEs name rrrene among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-68750
Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of service
rrrene · html_sanitize_ex
High8.2 - CVE-2026-68749
Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service
rrrene · html_sanitize_ex
High8.2 - CVE-2026-68747
CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration input
rrrene · html_sanitize_ex
Low2.3 - CVE-2026-66829
html_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirection
rrrene · html_sanitize_ex
Low2.3 - CVE-2026-66370
html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijacking
rrrene · html_sanitize_ex
Medium4.8 - CVE-2026-66843
html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embedding
rrrene · html_sanitize_ex
Low2.3