Express_xss_sanitizer_project Express_xss_sanitizer
2 CVEs affecting Express_xss_sanitizer_project Express_xss_sanitizer. Latest disclosed: 2026-03-27. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-33979 | High | 8.2 | 2026-03-27 | Express XSS Sanitizer is Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross S… |
CVE-2022-21169 | High | 7.3 | 2022-09-26 | The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allowing the attacker to bypass xss sanitiz… |