CVE-2017-16017

2018-04-2600:00:00

CWE-79

hackerone

www.cve.org

0.001 Low

EPSS

Percentile

46.4%

JSON

sanitize-html is a library for scrubbing html input for malicious values Versions 1.2.2 and below have a cross site scripting vulnerability.

CNA Affected

[
  {
    "product": "sanitize-html node module",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "<=1.2.2"
      }
    ]
  }
]

References

github.com/punkave/sanitize-html/issues/19

github.com/punkave/sanitize-html/pull/20

nodesecurity.io/advisories/155

0.001 Low

EPSS

Percentile

46.4%

JSON

Related for CVELIST:CVE-2017-16017