CVE-2026-54570 | AngleSharp up to 1.4.x HTML Parser HtmlDomBuilder.cs Consume encoding HTML injection

August 18, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in AngleSharp up to 1.4.x. This vulnerability affects the function Consume of the file AngleSharp/Html/Parser/HtmlDomBuilder.cs of the component HTML Parser. The manipulation of the argument encoding leads to HTML injection.

This vulnerability is traded as CVE-2026-54570. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More