CVE-2026-66829: Elixir Case Sensitive Sanitization Regexcve-2026-66829-elixir-case-sensitive-sanitization-regex
Sanitization regex matching dangerous HTML schemes or directives (such as 'javascript', 'data', 'refresh', or 'url') is case-sensitive because it lacks the 'i' flag. Attackers can bypass this filter using uppercase or mixed-case payloads.