https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 20:45:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-252673 EUVD-2026-252673 https://cve.radiocsirt.org/vuln/euvd-2026-252673 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59364 <p>The express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body.</p> <p>The express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-59364 https://cve.radiocsirt.org/vuln/ghsa-hvq2-wf92-j4f3 <p><strong>Affected:</strong> npm: express-xss-sanitizer</p> <p># Security Advisory: express-xss-sanitizer</p> <p>## Overview A vulnerability was discovered in express-xss-sanitizer that allowed unbounded recursion depth during sanitization of nested objects.</p> <p>## Affected Versions - All versions prior to 2.0.1</p> <p>## Patched Versions - 2.0.1 and later</p> <p>## Description The sanitize function in lib/sanitize.js performed recursive sanitization without depth limiting, making it vulnerable to stack overflow attacks via specially crafted deeply nested JSON objects.</p> <p>## Impact An attacker could cause denial-of-service by sending a request with deeply nested structures, potentially crashing the Node.js process.</p> <p>## Solution Upgrade to version 2.0.1 or later:</p> <p>```bash npm install express-xss-sanitizer@latest ```</p> <p><strong>Affected:</strong> npm: express-xss-sanitizer</p> <p># Security Advisory: express-xss-sanitizer</p> <p>## Overview A vulnerability was discovered in express-xss-sanitizer that allowed unbounded recursion depth during sanitization of nested objects.</p> <p>## Affected Versions - All versions prior to 2.0.1</p> <p>## Patched Versions - 2.0.1 and later</p> <p>## Description The sanitize function in lib/sanitize.js performed recursive sanitization without depth limiting, making it vulnerable to stack overflow attacks via specially crafted deeply nested JSON objects.</p> <p>## Impact An attacker could cause denial-of-service by sending a request with deeply nested structures, potentially crashing the Node.js process.</p> <p>## Solution Upgrade to version 2.0.1 or later:</p> <p>```bash npm install express-xss-sanitizer@latest ```</p> https://cve.radiocsirt.org/vuln/ghsa-hvq2-wf92-j4f3