Vulnerabilities in rrrene
6 resultsCVE-2026-68750HIGHQuadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of serviceEPSS 0.8%CVE-2026-68749HIGHQuadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of serviceEPSS 0.8%CVE-2026-66829LOWhtml_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirectionEPSS 0.6%CVE-2026-66843LOWhtml_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embeddingEPSS 0.5%CVE-2026-68747LOWCSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration inputEPSS 0.4%CVE-2026-66370MEDIUMhtml_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijackingEPSS 0.4%