Htmlunit

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 7
    Known Exploited: 0
    2
    Critical Level Threats
    5
    High Level Threats
    0
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-104828

    HtmlUnit Neko: Mutation XSS (mXSS) in HTMLWriterFilter - TEXTAREA/TITLE entity decode without re-encode

    Last Modified: Oct 21, 2026
    Published: Oct 15, 2026

    CVE-2023-49093

    HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL

    Last Modified: Nov 21, 2024
    Published: Dec 04, 2023

    CVE-2023-2798

    Denial of service in HtmlUnit

    Last Modified: Nov 21, 2024
    Published: May 25, 2023

    CVE-2023-26119

    Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage.

    Last Modified: Nov 21, 2024
    Published: Apr 03, 2023

    CVE-2022-29546

    HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the parsing of Processing Instruction (PI) data leads to heap memory consumption. This is similar to CVE-2022-28366 but affects a much later version of the product.

    Last Modified: Nov 02, 2026
    Published: Apr 25, 2022
    Items Per Page
    Htmlunit Vulnerabilities & Security CVEs | CVE-DB