Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-25887
5.3
MEDIUMCVSS v3
Severity scale
010
Description
The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment removal.
apostrophecms/sanitize-html
GitHubClean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis. Built on htmlparser2 for speed and tolerance
GitHubClean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis. Built on htmlparser2 for speed and tolerance< 2.7.1NVD