https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T12:13:40.432595+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-11808 cnvd-2018-11808 2026-10-05T12:13:40.516676+00:00 cnvd-2018-11808 https://cve.radiocsirt.org/vuln/euvd-2026-184846 EUVD-2026-184846 2026-10-05T12:13:40.516720+00:00 EUVD-2026-184846 https://cve.radiocsirt.org/vuln/fkie_cve-2017-0931 fkie_cve-2017-0931 2026-10-05T12:13:40.516736+00:00

html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.

 https://cve.radiocsirt.org/vuln/ghsa-hfj4-96f7-6r5g GHSA-hfj4-96f7-6r5g — Cross-Site Scripting in html-janitor 2026-10-05T12:13:40.516767+00:00

Affected: npm: html-janitor

Versions of `html-janitor` prior to 2.0.2 (all current versions) are vulnerable to cross-site scripting (XSS).

This is exploitable if user-controlled data is passed into the modules `clean()` function.

## Recommendation

No fix is currently available for this vulnerability. It is recommended to use an alternative module for HTML sanitization.

 https://cve.radiocsirt.org/vuln/gsd-2017-0931 gsd-2017-0931 2026-10-05T12:13:40.516795+00:00 gsd-2017-0931