CVE-2017-16016

2018-06-0419:29:01

Google

osv.dev

0.001 Low

EPSS

Percentile

35.9%

JSON

Sanitize-html is a library for scrubbing html input of malicious values. Versions 1.11.1 and below are vulnerable to cross site scripting (XSS) in certain scenarios: If allowed at least one nonTextTags, the result is a potential XSS vulnerability.

CPENameOperatorVersion
sanitize-htmleq1.10.1
sanitize-htmleq1.5.2
sanitize-htmleq1.7.1
sanitize-htmleq1.7.0
sanitize-htmleq1.8.0
sanitize-htmleq1.9.0
sanitize-htmleq1.7.2
sanitize-htmleq1.11.1
sanitize-htmleq1.11.0

Name	Operator	Version
sanitize-html	eq	1.10.1
sanitize-html	eq	1.5.2
sanitize-html	eq	1.7.1
sanitize-html	eq	1.7.0
sanitize-html	eq	1.8.0
sanitize-html	eq	1.9.0
sanitize-html	eq	1.7.2
sanitize-html	eq	1.11.1
sanitize-html	eq	1.11.0