# Security Advisory: HTMLSanitizer.jl

**URL:** <https://discourse.julialang.org/t/security-advisory-htmlsanitizer-jl/130136>\
**Category:** General Usage\
**Tags:** security\
**Created:** [June 23, 2025, 2:29pm UTC](https://discourse.julialang.org/t/security-advisory-htmlsanitizer-jl/130136 "2025-06-23T14:29:13Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![avik](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/avik/32/17_2.png) [@avik](https://discourse.julialang.org/u/avik)\
**Post date:** [June 23, 2025, 2:29pm UTC](https://discourse.julialang.org/t/security-advisory-htmlsanitizer-jl/130136/1 "2025-06-23T14:29:13Z")

</div>

There is a known vulnerability in the HTMLSanitzer.jl package in all versions below `v0.2.1`. We recommend all users upgrade to version `v0.2.1` as soon as possible.

More details here: [Possible XSS in HTMLSanitizer when using svg elements · Advisory · JuliaComputing/HTMLSanitizer.jl · GitHub](https://github.com/JuliaComputing/HTMLSanitizer.jl/security/advisories/GHSA-3mj7-qxh9-6q4p)

This has been assigned `CVE-2025-52561`