CVE-2005-1638: Pixel-Apes Group Safehtml

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

The _writeAttrs function in SafeHTML before 1.3.2 does not properly handle quotes in attribute values, which could allow remote attackers to exploit cross-site scripting (XSS) vulnerabilities in applications that rely on SafeHTML for protection.

Affected products

• Pixel-Apes Group Safehtml: version 1.1.0 only; version 1.2.0 only; version 1.2.1 only; version 1.3.0 only; version 1.3.1 only

Published 2005-05-17. Last modified 2026-06-16.