Description
sanitize-html before 1.4.3 has XSS.
Remediation
References
https://nodesecurity.io/advisories/135
https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2016-1000237.json
Related Vulnerabilities
CVE-2016-5018 Vulnerability in maven package org.apache.tomcat:tomcat-jasper
CVE-2016-10586 Vulnerability in npm package macaca-chromedriver
CVE-2019-9153 Vulnerability in npm package openpgp
CVE-2018-3747 Vulnerability in npm package public
CVE-2021-36373 Vulnerability in maven package org.apache.ant:ant