SA
Product
sanitize-html
14
CVEs
0
On KEV
9.3
Max CVSS
4
New 30D
Severity mix
Critical 1High 1Medium 11Low 1
Watch
Add sanitize-html to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25887 | 7.5 | Aug 30 | The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment… Affected: before 2.7.1 |
Showing 1