medium6.1
CVE-2017-0928
html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitizati…
Impact
html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitization to be bypassed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Theguardian | Html-Janitor | Version 2.0.2 |