Sanitize-html vulnerabilities
We track 1 vulnerability in Sanitize-html products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 30, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Sanitize-html vulnerabilities
- 7.5 High severity
sanitize-html: Inefficient Regular Expression Complexity
The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment removal.