EUVD-2018-0787

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Sanitize-html library versions 1.11.1 and below are vulnerable to cross site scripting attacks.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2017-16016	9 Nov 201817:47	–	circl
CNVD	Sanitize-html Cross-Site Scripting Vulnerability	15 Jun 201800:00	–	cnvd
CVE	CVE-2017-16016	4 Jun 201819:00	–	cve
Cvelist	CVE-2017-16016	4 Jun 201819:00	–	cvelist
Debian CVE	CVE-2017-16016	4 Jun 201819:00	–	debiancve
Github Security Blog	Cross-Site Scripting in sanitize-html	9 Nov 201817:47	–	github
Node.js	Cross-Site Scripting	27 Oct 201616:25	–	nodejs
NVD	CVE-2017-16016	4 Jun 201819:29	–	nvd
OSV	GHSA-XC6G-GGRC-QQ4R Cross-Site Scripting in sanitize-html	9 Nov 201817:47	–	osv
OSV	ROOT-APP-NPM-CVE-2017-16016 CVE-2017-16016 in @rootio/sanitize-html - Patched by Root	23 Dec 202514:29	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "8e13a2c4-24e1-30b9-b2ad-110f6eea6d9b",
        "vendor": {
          "name": "HackerOne"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "9ffd9856-ab02-3c6b-afb8-82c7c784f87c",
        "product": {
          "name": "sanitize-html node module"
        },
        "product_version": "≤1.11.1"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-16016
github	www.github.com/punkave/sanitize-html/issues/100
github	www.github.com/punkave/sanitize-html/commit/5d205a1005ba0df80e21d8c64a15bb3accdb2403
github	www.github.com/punkave/sanitize-html/commit/5d205a1005ba0df80e21d8c64a15bb3accdb2403)))
github	www.github.com/advisories/GHSA-xc6g-ggrc-qq4r
npmjs	www.npmjs.com/package/sanitize-html
npmjs	www.npmjs.com/advisories/154
nodesecurity	www.nodesecurity.io/advisories/154
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 36.1

CVSS 24.3

EPSS0.00286