CVE WATCH / VULNERABILITY DETAIL
CVE-2026-113650
MEDIUMCVSS 5.3NVD feed
Published 20 October 2026 · tracked since 21 October 2026
Description
ApostropheCMS is an open-source Node.js content management system. In sanitize-html 2.18.0, when an <iframe> is not allowed and disallowedTagsMode is 'discard' (the defaults), its raw-text content is re-sanitized by a recursive call to sanitizeHtml(text, options). The recursion has no bound and star
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-113719 MEDIUM 4.5
- CVE-2026-113716 MEDIUM 4.5
- CVE-2026-113708 CRITICAL 9.9
- CVE-2026-113709 CRITICAL 9.9
- CVE-2026-113643 MEDIUM 4.3
- CVE-2026-113710 MEDIUM 5.9
- CVE-2026-113711 HIGH 7.5
- CVE-2026-113666 HIGH 7.1
- CVE-2026-113668 MEDIUM 5.3
- CVE-2026-113670 MEDIUM 5.3