Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-16017
Description
sanitize-html is a library for scrubbing html input for malicious values Versions 1.2.2 and below have a cross site scripting vulnerability.
apostrophecms/sanitize-html
GitHubClean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis. Built on htmlparser2 for speed and tolerance
GitHubClean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis. Built on htmlparser2 for speed and tolerance<= 1.2.2NVD