p PatchFirst

PatchFirst · Latest vulnerabilities

node-sanitize-html vulnerabilities

Vulnerabilities published for node-sanitize-html in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2024-21501

    Medium · CVSS 5.3EPSS 1.03%Fix available

    CVE-2024-21501

    Versions of the package sanitize-html before 2.12.1 are vulnerable to Information Exposure when used on the backend and with the style attribute allowed, allowing enumeration of files in the system (including project dependencies). An attacker could exploit this vulnerability to gather details about the file system structure and dependencies of the targeted server.

    node-sanitize-htmlOperating systems
    • Update to 2.13.0+~2.11.0-1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →