sanitize-html vulnerabilities (Root)

9 vulnerabilities.

• sanitize-html Root NSWG-ECO-154 in @rootio/sanitize-html - Patched by Root NSWG-ECO-154 Fix available No scoreJune 4, 2026
• sanitize-html Root Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html` CVE-2026-44990 Fix available 9.3 CriticalMay 14, 2026
• sanitize-html Root sanitize-html is vulnerable to XSS through incomprehensive sanitization CVE-2019-25225 Fix available 6.1 MediumSeptember 8, 2025
• sanitize-html Root sanitize-html Information Exposure vulnerability CVE-2024-21501 Fix available 5.3 MediumFebruary 24, 2024
• sanitize-html Root Regular Expression Denial of Service (ReDoS) CVE-2022-25887 Fix available 5.3 MediumAugust 30, 2022
• sanitize-html Root Improper Input Validation in sanitize-html CVE-2021-26540 Fix available 5.3 MediumFebruary 8, 2021
• sanitize-html Root Improper Input Validation in sanitize-html CVE-2021-26539 Fix available 5.3 MediumFebruary 8, 2021
• sanitize-html Root Cross-Site Scripting in sanitize-html CVE-2016-1000237 Fix available 6.1 MediumJanuary 23, 2020
• sanitize-html Root Cross-Site Scripting in sanitize-html CVE-2017-16016 Fix available 6.1 MediumJune 4, 2018