Vulnerability Database - OSV

CVE-2026-68749

github.com/rrrene/html_sanitize_ex

Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows... 06 Aug

Fix available
Severity - 8.2 (High)

EEF-CVE-2026-68749

Hex/html_sanitize_ex
github.com/rrrene/html_sanitize_ex

Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service 06 Aug

Fix available
Severity - 8.2 (High)