CVE-2017-16017
CVE-2017-16017
This page contains facts from public vulnerability sources. Check the original advisory before updating.
sanitize-html is a library for scrubbing html input for malicious values Versions 1.2.2 and below have a cross site scripting vulnerability.
CVSS 6.1 · Medium · EPSS 1.2% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
sanitize-html node module
- Versions
- <=1.2.2: Affected
No fix published
sanitize-html npm
- Affected ranges
- SEMVER: < 1.2.3
Update to 1.2.3