All vulnerabilities

Servers and applications

GHSA-58r4-2p86-jp4x

HTML sanitizer is vulnerable to DOM clobbering

Severity
Medium 5.4
Published
11 Nov 2026
Last changed
11 Nov 2026
Added to UpHeron
11 Nov 2026
Fixed in
5.3.54
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
ContaoServers and applications · github:contao/contao
  • From 4.0.0 before 5.3.54

References