Description
The express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Express XSS Sanitizer project | Express XSS Sanitizer | 2.0.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | express-xss-sanitizer | < 2.0.1 | 2.0.1 | GHSA-hvq2-wf92-j4f3 |