The express-xss-sanitizer aka Express XSS Sanitizer package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body...
5.3CVSS0.00419EPSS
SaveExploits0References3
OSV•added 2025/09/14 12:0 a.m.•10 views
CVE-2025-59364
The express-xss-sanitizer aka Express XSS Sanitizer package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body...
