Html-janitor Node Module (Hackerone) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-06-04. Vendor: Hackerone.

CVEs of Html-janitor Node Module

• CVE-2017-0931 - CVSS 6.1 (medium), 2018-06-04: html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.
• CVE-2017-0928 - CVSS 6.1 (medium), 2018-06-04: html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing…