html_sanitize_ex — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in html_sanitize_ex, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-68750	Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of service CWE-407	8.2	High	2026-08-06
CVE-2026-68749	Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service CWE-1333	8.2	High	2026-08-06
CVE-2026-68747	CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration input CWE-74	2.3	Low	2026-08-06
CVE-2026-66829	html_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirection CWE-601	2.3	Low	2026-08-06
CVE-2026-66370	html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijacking CWE-601	4.8	Medium	2026-08-06
CVE-2026-66843	html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embedding CWE-829	2.3	Low	2026-08-06

All 6 known CVE vulnerabilities affecting html_sanitize_ex with full Chinese analysis, references, and POCs where available.