VYPR

npm package

@jitbit/htmlsanitizer

pkg:npm/%40jitbit/htmlsanitizer

Vulnerabilities (1)

  • CVE-2025-29771MedMar 14, 2025
    affected < 2.0.3fixed 2.0.3

    HtmlSanitizer is a client-side HTML Sanitizer. Versions prior to 2.0.3 have a cross-site scripting vulnerability when the sanitizer is used with a `contentEditable` element to set the elements `innerHTML` to a sanitized string produced by the package. If the code is particularly