code16/sharp Security Advisories for v9.22.4 (2)
-
[HIGH] code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute
PKSA-735v-pwws-tf2j CVE-2026-61823 GHSA-qxg3-46rw-79j8
Affected version: <9.22.5
Reported by:
GitHub -
[HIGH] code16/sharp has a stored XSS via data-html-content Sanitizer Bypass
PKSA-p6zx-3z97-z7f8 CVE-2026-61825 GHSA-vj3q-vp3g-j9c8
Affected version: <9.22.5
Reported by:
GitHub