Skip to content
OpenAdvisories

Package · npm

lettersanitizer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2022-31103

    Improper handling of CSS at-rules in lettersanitizer

    lettersanitizer is a DOM-based HTML email sanitizer for in-browser email rendering. All versions of lettersanitizer below 1.0.2 are affected by a denial of service issue when processing a CSS at-rule `@keyframes`. This package is depended on by [react-letter]…

    mat-sz lettersanitizer lettersanitizer npm