VYPR

HtmlSanitizer

by Sensiolabs

CVEs (1)

  • CVE-2026-121373MedNov 4, 2026
    risk 0.27cvss —epss —

    The Symfony HtmlSanitizer component MetaRefreshAttributeSanitizer, introduced to fix CVE-2026-48761, sanitizes the refresh URL of content attributes of meta tags using a regular expression that is too narrow, allowing sanitization to be bypassed, and resulting in…