Express Xss Sanitizer Security Vulnerabilities - May

cve

CVE-2022-21169

The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allowing the attacker to bypass xss sanitization.

7.3CVSS

6.1AI Score

0.001EPSS

2022-09-26 05:15 AM