R
Vendor security profile
rhukster
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs3
Critical0
CISA KEV0
Public exploit3
Patch rate%67
Avg. CVSS5.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
1
2
CVE KEV
CVE severity distribution
3toplam CVE
Medium3 (100%)
Patch and exploitation view
%67
Verified patch
%0
CISA KEV
%100
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
6.9
CVE-2026-103687
rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist
R
Patch verifiedEPSS %1
5.1
CVE-2026-103686
rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting
R
Patch verifiedEPSS %0
4.7
CVE-2026-100370
DOMSanitizer - Incomplete data: URL Sanitization in DOMSanitizer::isDangerousUrl() Allows Base64-Encoded Payloads to Bypass href and xlink:href Validation
R
Patch status unknownEPSS %0