CVE-2026-97045 | net-html up to 0.61.x HTML Parser childTextNodesAreLiteral HTML injection

October 27, 2026 Yanac

A vulnerability was found in net-html up to 0.61.x. It has been declared as problematic. Affected is the function childTextNodesAreLiteral of the component HTML Parser. Such manipulation leads to HTML injection.

This vulnerability is referenced as CVE-2026-97045. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More