ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render

影響: npm:sanitize-html < 2.18.0 → 2.18.0

sanitize-html discards the content of every element in nonTextTags. It delimits that region using htmlparser2's close events, and ignores the isImplied flag htmlparser2 passes it. Closing a still-open ancestor from inside a makes htmlparser2 unwind its stack past the noscript; the synthetic implied close it emits on the way ends the discard region early, and everything after it is treated as ordinary body content. A browser with scripting enabled parses content as raw text, so the same…

GitHub Advisory Databaseで読む

2026/10/21 03:03、GitHub Advisory Databaseが「ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「警告」(medium) です。関連する技術: JavaScript / Node.js。CVE: CVE-2026-113654。