VYPR

HTML Janitor

by Theguardian

CVEs (1)

  • CVE-2017-0928MedJun 4, 2018
    risk 0.40cvss 6.1epss 0.01

    html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitization to be bypassed.