system
Describe <CVE-2017-0928>.
user
What is <CVE-2017-0928>?
assistant
html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitization to be bypassed..