Html5lib is a standards-compliant HTML parser library embedded across numerous web applications and frameworks, despite its narrow product scope. The vendor's vulnerability signal centers on cross-site scripting weaknesses arising from improper input neutralization during HTML page generation, reflecting the parsing and sanitization demands inherent to handling untrusted markup. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Html5lib over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-9910MEDIUM The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of special characters in attribute | Feb 22, 2017 | 6.1 | 22 | NO | NO |
CVE-2016-9909MEDIUM The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) character in | Feb 22, 2017 | 6.1 | 17 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Html5lib.
Media articles that mention a CVE ID that affects a product developed by Html5lib — matched by CVE ID, not by vendor name.