Security Advisory

CVE-2022-25887

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-08-30 05:00:20

Last updated 2024-09-17 03:07:00

Assigner snyk

CVSS score 5.3

State PUBLISHED

Description

The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment removal.

← Browse all CVEs View on cve.org ↗