{"id":"ECHO-b56b-174c-3d1b","modified":"2026-10-20T17:52:51.821Z","published":"2026-10-20T13:58:36.508Z","upstream":["CVE-2026-25543","GHSA-j92c-7v7g-gj3f"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-25543"},{"type":"WEB","url":"https://github.com/mganss/HtmlSanitizer/security/advisories/GHSA-j92c-7v7g-gj3f"},{"type":"WEB","url":"https://github.com/mganss/HtmlSanitizer/commit/0ac53dca30ddad963f2b243669a5066933d82b81"},{"type":"WEB","url":"https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/template"},{"type":"WEB","url":"https://github.com/mganss/HtmlSanitizer/releases/tag/v9.0.892"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25543"},{"type":"WEB","url":"https://www.nuget.org/packages/HtmlSanitizer/9.0.892"},{"type":"WEB","url":"https://www.nuget.org/packages/HtmlSanitizer/9.1.893-beta"},{"type":"WEB","url":"https://github.com/advisories/GHSA-j92c-7v7g-gj3f"}],"affected":[{"package":{"name":"HtmlSanitizer","ecosystem":"Echo:NuGet","purl":"pkg:nuget/HtmlSanitizer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.865+echo.1"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-b56b-174c-3d1b.json"}}],"schema_version":"1.9.0"}