sanitize vulnerabilities and fixes

Recent CVEs affecting sanitize, with upgrade or downgrade steps. 2 tracked.

sanitize has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-07-06. Highest priority: CVE-2023-36823 (score 43/100).

• CVE-2023-36823 HIGH 7.1 UPGRADE MITIGATE Sanitize is an allowlist-based HTML and CSS sanitizer
• CVE-2023-23627 MEDIUM 6.1 UPGRADE Sanitize is an allowlist-based HTML and CSS sanitizer

FAQ

How do I fix sanitize vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is sanitize being exploited right now?

None of the tracked sanitize CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which sanitize CVE should I patch first?

CVE-2023-36823 currently ranks highest (43/100): Sanitize is an allowlist-based HTML and CSS sanitizer.

← Back to latest CVEs