NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Packagist · #253 most downloaded on Packagist
Provides an object-oriented API to sanitize untrusted HTML input for safe insertion into a document's DOM.
Last release 3 days ago
28 Sep 2026
Release timing varies
gaps range from 8 days to 4 months
Some releases are documented
notes for 16 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
5 years old
97 releases · first in 2022
security # cve-2026-48761 Sanitize URL attributes on , , <iframe>, , and the URL inside content ( @nicolas-grekas ) security # cve-2026-48760 Reject p…
Changelog (v6.4.40...v6.4.41)
One column per quarter.
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →