CVE-2026-8445: falha crítica em EmilStenstrom justhtml
justhtml before 1.12.0 Sanitizer Bypass via Markdown
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 0.6%
justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle brackets) in text nodes when converting a parsed document to Markdown via to_markdown(). While a small set of Markdown metacharacters are escaped, characters such as < and > are preserved, so untrusted input that is safe in to_html() — including entity-decoded text (e.g. <script>) or text from RCDATA/RAWTEXT-parsed elements like <title>, <textarea>, <noscript>, and <plaintext> — can be emitted as raw HTML in the Markdown output, enabling a sanitizer bypass and potential cross-site scripting when that output is rendered.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
EmilStenstrom · justhtmlCVEs relacionadas — EmilStenstrom justhtml
No mesmo produto, das mais perigosas para as menos.
CVE-2026-4671HIGHjusthtml before 1.18.0 Denial of Service via CSS SelectorEPSS 0.7%CVE-2026-7808CRITICALjusthtml before 1.16.0 Multiple Security Issues via SanitizationEPSS 0.6%CVE-2026-5388CRITICALjusthtml before 1.15.0 Multiple Security IssuesEPSS 0.6%CVE-2026-9769HIGHjusthtml before 1.10.0 Denial of Service via deeply nested HTMLEPSS 0.3%CVE-2026-8630MEDIUMjusthtml before 1.12.0 Mutation XSS via Raw Text ElementsEPSS 0.3%CVE-2026-77088MEDIUMjusthtml 0.9.0 through 1.21.0 Cross-Site Scripting via code-spanEPSS 0.3%