| Summary | Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2. |
|---|---|
| Publication Date | June 9, 2026, 5:17 a.m. |
| Registration Date | June 10, 2026, 4:12 a.m. |
| Last Update | June 9, 2026, 10:46 p.m. |