Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
express-xss-sanitizer
express-xss-sanitizer vulnerabilities (npm)
3 vulnerabilities.
express-xss-sanitizer
npm
Express XSS Sanitizer: allowedTags/allowedAttributes bypass leads to permissive sanitization (XSS risk)
CVE-2026-33979
Fix available
8.2
High
March 27, 2026
express-xss-sanitizer
npm
express-xss-sanitizer has an unbounded recursion depth
CVE-2025-59364
Fix available
5.3
Medium
September 14, 2025
express-xss-sanitizer
npm
Prototype Pollution
CVE-2022-21169
Fix available
7.3
High
September 26, 2022
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open