Hackerone Html Janitor Node Module vulnerabilities

2 vulnerabilities

Known vulnerabilities in Hackerone Html Janitor Node Module, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2017-0928hackeronehtml-janitor node module+2
EPSS score
1.02%
html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitization to be bypassed.6.1CVE-2017-0931hackeronehtml-janitor node module+2
EPSS score
1.05%
html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.