rrrene records
6 published records for vendor rrrene.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-1333 Inefficient Regular Expression Complexity1
- CWE-407 Inefficient Algorithmic Complexity1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2026-68749No exploit | Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of servicerrrene · htmlsanitizeex · CWE-1333 | High8.2 | — | 0.8% | Aug 6, 2026 |
32Monitor | CVE-2026-68750No exploit | Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of servicerrrene · htmlsanitizeex · CWE-407 | High8.2 | — | 0.8% | Aug 6, 2026 |
19Monitor | CVE-2026-66370No exploit | html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijackingrrrene · htmlsanitizeex · CWE-601 | Medium4.8 | — | 0.4% | Aug 6, 2026 |
9Monitor | CVE-2026-66829No exploit | html_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirectionrrrene · htmlsanitizeex · CWE-601 | Low2.3 | — | 0.5% | Aug 6, 2026 |
9Monitor | CVE-2026-66843No exploit | html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embeddingrrrene · htmlsanitizeex · CWE-829 | Low2.3 | — | 0.5% | Aug 6, 2026 |
9Monitor | CVE-2026-68747No exploit | CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration inputrrrene · htmlsanitizeex · CWE-74 | Low2.3 | — | 0.4% | Aug 6, 2026 |
- CVE-2026-6874932Monitor
Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service
HighCVSS 8.2No exploitEPSS 0%rrrene · htmlsanitizeexAug 6, 2026
- CVE-2026-6875032Monitor
Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of service
HighCVSS 8.2No exploitEPSS 0%rrrene · htmlsanitizeexAug 6, 2026
- CVE-2026-6637019Monitor
html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijacking
MediumCVSS 4.8No exploitEPSS 0%rrrene · htmlsanitizeexAug 6, 2026
- CVE-2026-668299Monitor
html_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirection
LowCVSS 2.3No exploitEPSS 0%rrrene · htmlsanitizeexAug 6, 2026
- CVE-2026-668439Monitor
html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embedding
LowCVSS 2.3No exploitEPSS 0%rrrene · htmlsanitizeexAug 6, 2026
- CVE-2026-687479Monitor
CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration input
LowCVSS 2.3No exploitEPSS 0%rrrene · htmlsanitizeexAug 6, 2026