Description
html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitization to be bypassed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | html-janitor node module | All versions | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | html-janitor | all versions | — | GHSA-fx46-whrj-73v5 |