ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render

影響: npm:sanitize-html < 2.18.0 → 2.18.0

sanitize-html discards the content of every element in nonTextTags. It delimits that region using htmlparser2's close events, and ignores the isImplied flag htmlparser2 passes it. Closing a still-open ancestor from inside a makes htmlparser2 unwind its stack past the noscript; the synthetic implied close it emits on the way ends the discard region early, and everything after it is treated as ordinary body content. A browser with scripting enabled parses content as raw text, so the same…

在 GitHub Advisory Database 阅读

2026/10/21 03:03，GitHub Advisory Database 发布了“ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render”（类型：漏洞公告）。严重程度为“中危”（medium）。相关技术：JavaScript / Node.js。CVE：CVE-2026-113654。