.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

typo3/html-sanitizer 1.5.0 vulnerabilities

6 advisories known · typo3/html-sanitizer@1.5.0 · 4 affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 1.5.0

SEVERITYADVISORYPUBLISHED

MediumTYPO3 HTML Sanitizer allows Cross-site ScriptingGHSA-p5j5-4j3q-8mq8CVE-2026-47345Affected <2.3.2Fixed in 2.3.2OSV source ↗5 months ago

MediumBypassing Cross-Site Scripting Protection in TYPO3 HTML SanitizerGHSA-mm79-jhqm-9j54BIT-typo3-2023-47125CVE-2023-47125Affected >=1.0.0 <1.5.3, >=2.0.0 <2.1.4Fixed in 1.5.3 Fixed in 2.1.4OSV source ↗3 years ago

MediumBy-passing Cross-Site Scripting Protection in HTML SanitizerGHSA-59jf-3q9v-rh6gCVE-2023-38500Affected >=1.0.0 <1.5.1, >=2.0.0 <2.1.2Fixed in 1.5.1 Fixed in 2.1.2OSV source ↗3 years ago

LowTYPO3 HTML Sanitizer allows Cross-site ScriptingGHSA-jvf5-rxvv-3mcgCVE-2026-47344Affected <2.3.2Fixed in 2.3.2OSV source ↗5 months ago

Does not affect 1.5.0

SEVERITYADVISORYPUBLISHED

MediumTYPO3 HTML Sanitizer vulnerable to Cross-Site ScriptingGHSA-hvwx-qh2h-xcfjCVE-2022-23499Affected >=1.0.0 <1.5.0, >=2.0.0 <2.1.1Fixed in 1.5.0 Fixed in 2.1.1OSV source ↗4 years ago

MediumTYPO3 HTML Sanitizer Bypasses Cross-Site Scripting ProtectionGHSA-47m6-46mj-p235CVE-2022-36020Affected >=1.0.0 <1.0.7, >=2.0.0 <2.0.16Fixed in 1.0.7 Fixed in 2.0.16OSV source ↗4 years ago