npm
sanitize-html
8 known vulnerabilities · 0 critical · 0 high
CVE-2019-25225MEDIUM
sanitize-html is vulnerable to XSS through incomprehensive sanitization
Published Sep 8, 2025
GHSA-9mrh-v2v3-xpfm
sanitize-html allowedTags Bypass via Entity-Decoded Text in nonTextTags Elements
Published Apr 16, 2026
Check your entire dependency tree at onceRun dependency scan →