Product by OWASP

    Java Html Sanitizer

    2 known vulnerabilities in Java Html Sanitizer (OWASP), 0 of them actively exploited (CISA KEV).

    Key figures

    2

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Java Html Sanitizer (OWASP)
    CriticalCVE-2021-42575

    OWASP Java Html Sanitizer: security vulnerability

    also in 2 other products

    		9.8
    HighCVE-2025-66021

    OWASP Java HTML Sanitizer is vulnerable to XSS via noscript tag and improper style tag sanitization

    also in 1 other product

    		6.1

    All products by OWASP