Product · HackerOne

html-janitor node module

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.1

CVE-2017-0928

Bypassing Sanitization using DOM clobbering in html-janitor

html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitization to be bypassed.

HackerOne html-janitor node module html-janitor npm

Jun 4, 2018
Medium 6.1

CVE-2017-0931

Cross-Site Scripting in html-janitor

html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.

HackerOne html-janitor node module html-janitor npm

Jun 4, 2018