Description
html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitization to be bypassed.
Remediation
References
https://hackerone.com/reports/308158
https://github.com/guardian/html-janitor/issues/35
Related Vulnerabilities
CVE-2023-33725 Vulnerability in maven package org.broadleafcommerce:broadleaf
CVE-2020-28052 Vulnerability in maven package org.bouncycastle:bcprov-jdk15to18
CVE-2020-2238 Vulnerability in maven package org.jenkins-ci.plugins:git-parameter
CVE-2022-27139 Vulnerability in npm package ghost
CVE-2022-38750 Vulnerability in maven package org.yaml:snakeyaml