CVE-2021-42575: owasp-java-html-sanitizer: improper policies enforcement may lead to remote code execution

Severity: Critical

CVSS Score: 9.8

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.