Product · Lumi

H5P-Nodejs-library

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.4

CVE-2025-47828

@lumieducation/h5p-server Fails to Sanitize Plain Text Strings

Lumi H5P-Nodejs-library before 9.3.3 omits a sanitizeHtml call for plain text strings.

Lumi H5P-Nodejs-library @lumieducation/h5p-server npm

May 11, 2025