SA
Product
sanitize-html
14
CVEs
0
On KEV
9.3
Max CVSS
4
New 30D
Severity mix
Critical 1High 1Medium 11Low 1
Watch
Add sanitize-html to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44990 | 9.3 | Jun 12 | Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html` Affected: < 2.17.4 |
Showing 1