{"action":"Upgrade sanitize-html to 2.3.2 or later.","affected":[{"fixed":"2.3.2","introduced":"0"}],"component":"sanitize-html","cve_ids":["CVE-2021-26540"],"ecosystem":"npm","epss":0.01775,"exploited":false,"fixed_versions":["2.3.2"],"ghsa_id":"GHSA-mjxr-4v3x-q3m4","id":"tcs_01M5KG0ZN30MB0K1RVQ69XWF6W","modified_at":"2023-11-08T04:05:21.154746Z","published_at":"2021-05-06T16:10:19Z","references":["https://osv.dev/vulnerability/GHSA-mjxr-4v3x-q3m4","https://nvd.nist.gov/vuln/detail/CVE-2021-26540","https://github.com/apostrophecms/sanitize-html/pull/460","https://advisory.checkmarx.net/advisory/CX-2021-4309","https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md#232-2021-01-26"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-mjxr-4v3x-q3m4","url":"https://osv.dev/vulnerability/GHSA-mjxr-4v3x-q3m4"}],"summary":"Improper Input Validation in sanitize-html"}