MEDIUM
EmilStenstrom
CVE published 2026-08-23
CVE-2026-6827
CVE-2026-6827 affects justhtml before 1.17.0, with multiple security issues in sanitization, serialization, and programmatic DOM handling. Custom policies preserving foreign namespaces could allow dangerous content to survive sanitization. Additional hardening fixes address sanitize-pipeline cache mutation and DOM parent/child cycles. Affected product deployments should be reviewed for potential vulnerabi [truncated]