CVE-2025-47828
CVE-2025-47828
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Lumi H5P-Nodejs-library before 9.3.3 omits a sanitizeHtml call for plain text strings.
CVSS 6.4 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
h5p-nodejs-library
- Versions
- ≥ 0, < 9.3.3: Affected (semver)
Update to 9.3.3
@lumieducation/h5p-server npm
- Affected ranges
- SEMVER: < 9.3.3
Update to 9.3.3