Lucene search

K
osvGoogleOSV:CVE-2022-31103
HistoryJun 27, 2022 - 11:15 p.m.

CVE-2022-31103

2022-06-2723:15:08
Google
osv.dev
3
lettersanitizer
dom-based html email
denial of service
react-letter
software vulnerability

EPSS

0.001

Percentile

46.6%

lettersanitizer is a DOM-based HTML email sanitizer for in-browser email rendering. All versions of lettersanitizer below 1.0.2 are affected by a denial of service issue when processing a CSS at-rule @keyframes. This package is depended on by react-letter, therefore everyone using react-letter is also at risk. The problem has been patched in version 1.0.2.

EPSS

0.001

Percentile

46.6%