ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render

影響: npm:sanitize-html < 2.18.0 → 2.18.0

sanitize-html discards the content of every element in nonTextTags. It delimits that region using htmlparser2's close events, and ignores the isImplied flag htmlparser2 passes it. Closing a still-open ancestor from inside a makes htmlparser2 unwind its stack past the noscript; the synthetic implied close it emits on the way ends the discard region early, and everything after it is treated as ordinary body content. A browser with scripting enabled parses content as raw text, so the same…

Read on GitHub Advisory Database

On 10/21/2026, 03:03 AM, GitHub Advisory Database published "ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render" (type: Advisory). Severity is "Medium" (medium). Related technologies: JavaScript / Node.js. CVE: CVE-2026-113654.