CVE-2026-126205 | flavorjones Loofah up to 2.25.2 HTML5 Sanitizer incorrect bitwise shift of integer

A vulnerability, which was classified as problematic, has been found in flavorjones Loofah up to 2.25.2. Affected by this vulnerability is an unknown functionality of the component HTML5 Sanitizer. The manipulation leads to incorrect bitwise shift of integer.

This vulnerability is referenced as CVE-2026-126205. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More