{"action":"Upgrade sanitize-html to 2.0.0-beta or later.","affected":[{"fixed":"2.0.0-beta","introduced":"0"}],"component":"sanitize-html","cve_ids":["CVE-2019-25225"],"ecosystem":"npm","epss":0.00269,"exploited":false,"fixed_versions":["2.0.0-beta"],"ghsa_id":"GHSA-qhxp-v273-g94h","id":"tcs_01M5KG69E7BP54BTH8PF6MW69B","modified_at":"2025-09-12T20:27:20.408277Z","published_at":"2025-09-08T12:30:33Z","references":["https://osv.dev/vulnerability/GHSA-qhxp-v273-g94h","https://nvd.nist.gov/vuln/detail/CVE-2019-25225","https://github.com/apostrophecms/sanitize-html/issues/293","https://github.com/apostrophecms/sanitize-html/pull/156","https://github.com/apostrophecms/sanitize-html/commit/712cb6895825c8bb6ede71a16b42bade42abcaf3","https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2019/CVE-2019-25225","https://github.com/apostrophecms/sanitize-html"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-qhxp-v273-g94h","url":"https://osv.dev/vulnerability/GHSA-qhxp-v273-g94h"}],"summary":"sanitize-html is vulnerable to XSS through incomprehensive sanitization"}