Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

sanitize-html

npm

Clean up user-submitted HTML, preserving allowlisted elements and allowlisted attributes on a per-element basis

View on github.com · View on npmjs.org

Security Advisories for sanitize-html in npm

Moderate
12 days ago

sanitize-html has incomplete URI scheme validation in that allows javascript: URIs through action, formaction, data, poster, and background attributes GSA_kwCzR0hTQS12Y2N2LWNteHAtNGo5aM4ABg_H

npm sanitize-html
Critical
3 months ago

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html` GSA_kwCzR0hTQS1ycHI5LXJ4djcteDY0M84ABW4J

npm sanitize-html
Moderate
4 months ago

sanitize-html allowedTags Bypass via Entity-Decoded Text in nonTextTags Elements GSA_kwCzR0hTQS05bXJoLXYydjMteHBmbc4ABVYs

npm sanitize-html
Moderate
11 months ago

sanitize-html is vulnerable to XSS through incomprehensive sanitization GSA_kwCzR0hTQS1xaHhwLXYyNzMtZzk0aM4ABLzK

npm sanitize-html
Moderate
over 2 years ago

sanitize-html Information Exposure vulnerability GSA_kwCzR0hTQS1ybTk3LXg1NTYtcTM2aM4AA5fD

npm sanitize-html
High
almost 4 years ago

Sanitize-html Vulnerable To REDoS Attacks GSA_kwCzR0hTQS1jZ2ZtLXh3cDctMmN2cs4AAuje

npm sanitize-html
Potential
Critical
almost 5 years ago

Apostrophe CMS Insufficient Session Expiration vulnerability GSA_kwCzR0hTQS05ajltLTh3amMtZmY5Ns0XGg

npm apostrophe
Potential
Moderate
almost 5 years ago

Cross-site Scripting in apostrophe GSA_kwCzR0hTQS00cjljLWpnaGMtY3g1bc0W8Q

npm apostrophe
Moderate
over 5 years ago

Improper Input Validation in sanitize-html MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1qeHItNHYzeC1xM200

npm sanitize-html
Moderate
over 5 years ago

Improper Input Validation in sanitize-html MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJqcXEtOThmNi02ajNy

npm sanitize-html
Potential
Moderate
almost 6 years ago

Open Redirect in apostrophe MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg5N2ctNG14Ny01cDJw

npm apostrophe
Moderate
over 6 years ago

Cross-Site Scripting in sanitize-html MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNqN20taG1oMy05am1w

npm sanitize-html
Moderate
almost 8 years ago

Cross-Site Scripting in sanitize-html MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhjNmctZ2dyYy1xcTRy

npm sanitize-html
Moderate
almost 8 years ago

Cross-Site Scripting in sanitize-html MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdnOTYtMzkzMy1qMnc1

npm sanitize-html

Filter by Severity

Moderate 11 Critical 2 High 1