https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:22:23.187101+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-24661 cnvd-2018-24661 2026-10-05T07:22:23.190095+00:00 cnvd-2018-24661 https://cve.radiocsirt.org/vuln/euvd-2026-185038 EUVD-2026-185038 2026-10-05T07:22:23.190127+00:00 EUVD-2026-185038 https://cve.radiocsirt.org/vuln/fkie_cve-2017-0928 fkie_cve-2017-0928 2026-10-05T07:22:23.190142+00:00

html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitization to be bypassed.

 https://cve.radiocsirt.org/vuln/ghsa-fx46-whrj-73v5 GHSA-fx46-whrj-73v5 — Bypassing Sanitization using DOM clobbering in html-janitor 2026-10-05T07:22:23.190171+00:00

Affected: npm: html-janitor

All versions of `html-janitor` are vulnerable to cross-site scripting (XSS).

Arbitrary HTML can pass the sanitization process, which can be unexpected and dangerous (XSS) in case user-controlled input is passed to the clean function."

## Recommendation

Upgrade to version 2.0.4 or later.

 https://cve.radiocsirt.org/vuln/gsd-2017-0928 gsd-2017-0928 2026-10-05T07:22:23.190197+00:00 gsd-2017-0928