CVE-2026-103687Published
rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-103687 · Microsoft / collected KEV context
cve-program · CVE-2026-103687
- https://vuldb.com/vuln/412551
- https://vuldb.com/vuln/412551/cti
- https://vuldb.com/cve/CVE-2026-103687
- https://vuldb.com/submit/958345
- https://github.com/rhukster/dom-sanitizer/security/advisories/GHSA-cjfg-j8jp-5xvc
- https://github.com/rhukster/dom-sanitizer/commit/139c46c3d7c9bc81542b7b5a58d5cde5d0e0195a
- https://github.com/rhukster/dom-sanitizer/releases/tag/1.0.16
- https://github.com/rhukster/dom-sanitizer/
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.