5.3
Moyenne
CVE-2022-25887 The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure…
Description
The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment removal.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| sanitize-html 2.7 | premières → < 2.7.1 | 2.7.1 |