← All CVEs NewScan detects
high

CVE-2026-4671

justhtml CSS selector and linkification denial of service

Severity
high
Affected product
justhtml
Affected versions
justhtml < 1.18.0
Fixed in
justhtml 1.18.0
Detection basis
Component version range
Shipped rule
justhtml: justhtml CSS selector and linkification denial of service
Added to NewScan
2026-08-23
Detected by
NewScan — free, self-hosted

How NewScan reports it

COMPONENT VERSION RANGE

NewScan fingerprints justhtml from its response and reports this CVE when the detected version falls inside the affected range below.

References

Scan for this yourself — local, in-band scanning is free.

Get NewScan (FREE) →

Review the measured benchmark, then use the verified remediation process.