express-xss-sanitizer

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2025-59364

express-xss-sanitizer has an unbounded recursion depth

The express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body.

Express XSS Sanitizer project Express XSS Sanitizer express-xss-sanitizer npm

Sep 14, 2025