Security Advisory

CVE-2020-26303

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-26 20:26:09

Last updated 2024-10-28 14:59:29

Assigner GitHub_M

State PUBLISHED

Description

insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available.

← Browse all CVEs View on cve.org ↗