sanitize-html allowedTags Bypass via Entity-Decoded Text in nonTextTags Elements
Moderate severity
GitHub Reviewed
Published
Apr 15, 2026
in
apostrophecms/apostrophe
•
Updated Apr 16, 2026
Give feedback on Dependabot alerts