ezyang/htmlpurifier

Security advisories for ezyang/htmlpurifier, newest first. 4 known, 1 without a fix yet.

RSS feed Check your lock file →

Latest version

4.19.1

Advisories

4 · 1 unfixed

Last advisory

17 May 2022

Safe from

no fix for all yet

4 advisories · newest first

MODERATE5.3 17 May 2022

HTML Purifier allows remote attackers to obtain sensitive information

GHSA-jw86-5cjf-mv79 · CVE-2011-3744

Affected

≤ 4.2.0

Fixed in

no fix yet

Published

17 May 2022

MODERATE6.1 1 May 2022

HTML Purifier Cross-site Scripting vulnerability

GHSA-6fh7-fwqj-mv49 · CVE-2007-3498

Affected

< 2.0.1

Fixed in

2.0.1

Published

1 May 2022

MODERATE 1 Jun 2010

XSS vulnerability exploitable on Internet Explorer

PKSA-mxmm-yhr7-jf8c · CVE-2010-2479

Affected

< 4.1.1

Fixed in

4.1.1

Published

1 Jun 2010

MODERATE 26 Apr 2010

Multiple XSS vulnerabilities exploitable on Internet Explorer

PKSA-dcn7-gtzn-nbj6 · CVE-2010-4183

Affected

< 4.1.0

Fixed in

4.1.0

Published

26 Apr 2010

/advisories/composer/ezyang/htmlpurifier/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →