HackerOne / Html-Janitor Node Module

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2017-0931	html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.	MEDIUM	6.1	Jun 4, 2018
CVE-2017-0928	html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitizati…	MEDIUM	6.1	Jun 4, 2018

Rows per page

Showing 1 to 2 of 2 CVEs