Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 10
Reset filtersjusthtml: to_markdown() code-span blank-line breakout enables XSS
justhtml introduces denial-of-service hardening
justhtml has sanitization bypass in custom policies and programmatic DOM
Multiple security fixes in justhtml
justhtml includes multiple security fixes
justhtml: Mutation XSS with custom foreign-namespace sanitization policies
JustHTML is vulnerable to XSS via code fence breakout in <pre> content
JustHTML has a Sanitizer Bypass (in Markdown)
JustHTML Affected by Mutation XSS via Literal Text Serialization in Raw Text Elements (style/script)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.