description: sanitize-html is a library for scrubbing html input for malicious values Versions 1.2.2 and below have a cross site scripting vulnerability.
problem types: Cross-site Scripting (XSS) - Generic (CWE-79)
affected:
{
product: sanitize-html node module
vendor: HackerOne
versions:
status: affected, version: <=1.2.2
}