npm - OSV

GHSA-jxwj-j7wr-gfrw

npm/sanitize-html

ApostropheCMS: Mutation-XSS / allowedTags bypass via literal `</textarea/>` solidus close 03 Sep

Fix available
Severity - 6.1 (Medium)

GHSA-g8qq-57p8-ggw5

npm/sanitize-html

ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypass 01 Sep

Fix available
Severity - 5.4 (Medium)

GHSA-vccv-cmxp-4j9h

npm/sanitize-html

sanitize-html has incomplete URI scheme validation in that allows javascript: URIs through action, formaction, data, poster, and background attributes 31 Jul

Fix available
Severity - 5.4 (Medium)

GHSA-rpr9-rxv7-x643

npm/sanitize-html

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html` 14 May

Fix available
Severity - 9.3 (Critical)

GHSA-9mrh-v2v3-xpfm

npm/sanitize-html

sanitize-html allowedTags Bypass via Entity-Decoded Text in nonTextTags Elements 16 Apr

Fix available
Severity - 6.1 (Medium)

GHSA-qhxp-v273-g94h

npm/sanitize-html

sanitize-html is vulnerable to XSS through incomprehensive sanitization 08 Sep 2025

Fix available
Severity - 6.1 (Medium)

GHSA-rm97-x556-q36h

npm/sanitize-html

sanitize-html Information Exposure vulnerability 24 Feb 2024

Fix available
Severity - 5.3 (Medium)

GHSA-cgfm-xwp7-2cvr

npm/sanitize-html

Sanitize-html Vulnerable To REDoS Attacks 31 Aug 2022

Fix available
Severity - 7.5 (High)

GHSA-mjxr-4v3x-q3m4

npm/sanitize-html

Improper Input Validation in sanitize-html 06 May 2021

Fix available
Severity - 5.3 (Medium)

GHSA-rjqq-98f6-6j3r

npm/sanitize-html

Improper Input Validation in sanitize-html 06 May 2021

Fix available
Severity - 5.3 (Medium)

GHSA-3j7m-hmh3-9jmp

npm/sanitize-html

Cross-Site Scripting in sanitize-html 16 Apr 2020

Fix available
Severity - 6.1 (Medium)

GHSA-xc6g-ggrc-qq4r

npm/sanitize-html

Cross-Site Scripting in sanitize-html 09 Nov 2018

Fix available

GHSA-wg96-3933-j2w5

npm/sanitize-html

Cross-Site Scripting in sanitize-html 09 Nov 2018

Fix available
Severity - 6.1 (Medium)

Vulnerabilities