description: html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitization to be bypassed.
problem types: External Control of Critical State Data (CWE-642)
affected:
{
product: html-janitor node module
vendor: HackerOne
versions:
status: affected, version: All versions
}