https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 07:37:51 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-24661 cnvd-2018-24661 https://cve.radiocsirt.org/vuln/cnvd-2018-24661 https://cve.radiocsirt.org/vuln/euvd-2026-185038 EUVD-2026-185038 https://cve.radiocsirt.org/vuln/euvd-2026-185038 https://cve.radiocsirt.org/vuln/fkie_cve-2017-0928 <p>html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the &#39;_sanitized&#39; variable causing sanitization to be bypassed.</p> <p>html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the &#39;_sanitized&#39; variable causing sanitization to be bypassed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-0928 https://cve.radiocsirt.org/vuln/ghsa-fx46-whrj-73v5 <p><strong>Affected:</strong> npm: html-janitor</p> <p>All versions of `html-janitor` are vulnerable to cross-site scripting (XSS).</p> <p>Arbitrary HTML can pass the sanitization process, which can be unexpected and dangerous (XSS) in case user-controlled input is passed to the clean function.&#34;</p> <p>## Recommendation</p> <p>Upgrade to version 2.0.4 or later.</p> <p><strong>Affected:</strong> npm: html-janitor</p> <p>All versions of `html-janitor` are vulnerable to cross-site scripting (XSS).</p> <p>Arbitrary HTML can pass the sanitization process, which can be unexpected and dangerous (XSS) in case user-controlled input is passed to the clean function.&#34;</p> <p>## Recommendation</p> <p>Upgrade to version 2.0.4 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-fx46-whrj-73v5 https://cve.radiocsirt.org/vuln/gsd-2017-0928 gsd-2017-0928 https://cve.radiocsirt.org/vuln/gsd-2017-0928