Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-14735

Fixed in a distro release EPSS 2%

OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.

Published 2017-09-25 · CVE record · OSV

Products: antisamy_project antisamy

Fixed upstream

EcosystemPackageFixed in
Mavenorg.owasp.antisamy:antisamy1.5.7

Distro releases

ReleasePackageFixed in
Debian 12libowasp-antisamy-javano fix
Debian 13libowasp-antisamy-java1.7.4-1
Debian 14libowasp-antisamy-java1.7.4-1
Ubuntu 16.04 LTSlibowasp-antisamy-javano fix
Ubuntu 18.04 LTSlibowasp-antisamy-javano fix
Ubuntu 20.04 LTSlibowasp-antisamy-javano fix
Ubuntu 22.04 LTSlibowasp-antisamy-javano fix
Ubuntu 24.04 LTSlibowasp-antisamy-javano fix
Ubuntu 25.10libowasp-antisamy-javano fix
Ubuntu 26.04 LTSlibowasp-antisamy-javano fix
Ubuntu 26.10libowasp-antisamy-javano fix