Description
html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | html-janitor node module | All versions | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | html-janitor | < 2.0.3 | 2.0.3 | GHSA-hfj4-96f7-6r5g |