CVE-2026-5751: justhtml Parser-Differential Cross-Site Scripting Vulnerability
A parser-differential cross-site scripting (mXSS) vulnerability exists in justhtml versions 1.13.0 and earlier. The flaw allows for markup injection when using a custom SanitizationPolicy that preserves foreign namespaces. Update to version 1.14.0 or later to mitigate.