VendorsUnJSunheadall versions
Vulnerabilities

UnJS Unhead

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-39315
Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe()
Published 2026-04-09 · Analyzed
6.1EPSS 0.003
CVE-2026-31860
Unhead has a XSS bypass in `useHeadSafe` via attribute name injection and case-sensitive protocol check
Published 2026-03-12 · Analyzed
6.1EPSS 0.003
CVE-2026-31873
Unhead has a Bypass of URI Scheme Sanitization in makeTagSafe via Case-Sensitivity
Published 2026-03-12 · Analyzed
6.1EPSS 0.003