express-xss-sanitizer
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Express XSS Sanitizer: allowedTags/allowedAttributes bypass leads to permissive sanitization (XSS risk) | express-xss-sanitizer | npm | High | Fix reported | |
| express-xss-sanitizer has an unbounded recursion depth | express-xss-sanitizer | npm | Medium | Fix reported | |
| express-xss-sanitizer vulnerable to Prototype Pollution via allowedTags attribute | express-xss-sanitizer | npm | Medium | Fix reported |