PkgSeer

Vulnerabilities

Last updated 41 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
sanitize-html ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS) Low Risk 3.7 3 hours ago 3 hours ago
sanitize-html ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLs Medium Risk 5.4 3 hours ago 3 hours ago
sanitize-html ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render Medium Risk 6.0 3 hours ago 3 hours ago
sanitize-html ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypass Medium Risk 5.4 1 month ago 1 month ago
sanitize-html sanitize-html Information Exposure vulnerability Medium Risk 5.3 2 years ago 1 month ago
sanitize-html ApostropheCMS: Mutation-XSS / allowedTags bypass via literal `</textarea/>` solidus close Medium Risk 6.1 1 month ago 1 month ago
sanitize-html sanitize-html has incomplete URI scheme validation in that allows javascript: URIs through action, formaction, data, poster, and background attributes Medium Risk 5.4 2 months ago 2 months ago
sanitize-html Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html` Critical 9.3 5 months ago 4 months ago
sanitize-html sanitize-html allowedTags Bypass via Entity-Decoded Text in nonTextTags Elements Medium Risk 6.1 6 months ago 6 months ago
sanitize-html sanitize-html is vulnerable to XSS through incomprehensive sanitization Medium Risk 6.1 1 year ago 1 year ago
sanitize-html Sanitize-html Vulnerable To REDoS Attacks High Risk 7.5 4 years ago 2 years ago
sanitize-html Improper Input Validation in sanitize-html Medium Risk 5.3 5 years ago 2 years ago
sanitize-html Improper Input Validation in sanitize-html Medium Risk 5.3 5 years ago 2 years ago
sanitize-html Cross-Site Scripting in sanitize-html Medium Risk 6.1 7 years ago 2 years ago
sanitize-html Cross-Site Scripting in sanitize-html Medium Risk 6.0 7 years ago 2 years ago
sanitize-html Cross-Site Scripting in sanitize-html Medium Risk 6.1 6 years ago 2 years ago
Data courtesy of OSV.dev
Page 1