CVE-2026-47344

Low

Advisory

Published 12 Jun 2026In the index since 8 Sept 2026

TYPO3 HTML Sanitizer allows Cross-site Scripting

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
typo3/html-sanitizercomposer	v2.2.0, v2.3.1	2.3.2	2

2 by stars

Chart

Latest

Affected images

Radar Score

typo3christianhuth

1 of the 2 container images this version deploys carry CVE-2026-47344.

Container image	Digest	Package	Fixed in
martinhelmich/typo3 :12.4	c83a4f3fd7ae	typo3/html-sanitizer@v2.2.0	2.3.2

8,466

typo3schoolguys-helmcharts

1 of the 1 container images this version deploys carry CVE-2026-47344.

Container image	Digest	Package	Fixed in
registry.gitlab.com/school_guy/docker-typo3 :13.4.30-197d868e	d76185d7270d	typo3/html-sanitizer@v2.3.1	2.3.2

4,836

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
martinhelmich/typo3 :12.4	c83a4f3fd7ae	typo3/html-sanitizer@v2.2.0	2.3.2	1
registry.gitlab.com/school_guy/docker-typo3 :13.4.30-197d868e	d76185d7270d	typo3/html-sanitizer@v2.3.1	2.3.2	1