{"action":"Upgrade sanitize-html to 2.12.1 or later.","affected":[{"fixed":"2.12.1","introduced":"0"}],"component":"sanitize-html","cve_ids":["CVE-2024-21501"],"ecosystem":"npm","epss":0.01027,"exploited":false,"fixed_versions":["2.12.1"],"ghsa_id":"GHSA-rm97-x556-q36h","id":"tcs_01M5KG9DE8ZXKJEHQCHZ3FYK9R","modified_at":"2026-09-10T03:50:09.893187752Z","published_at":"2024-02-24T06:30:17Z","references":["https://osv.dev/vulnerability/GHSA-rm97-x556-q36h","https://nvd.nist.gov/vuln/detail/CVE-2024-21501","https://github.com/apostrophecms/sanitize-html/pull/650","https://github.com/apostrophecms/sanitize-html/commit/c5dbdf77fe8b836d3bf4554ea39edb45281ec0b4","https://gist.github.com/Slonser/8b4d061abe6ee1b2e10c7242987674cf","https://github.com/apostrophecms/apostrophe/discussions/4436","https://github.com/apostrophecms/sanitize-html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EB5JPYRCTS64EA5AMV3INHDPI6I4AW7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P4I5X6V3LYUNBMZ5YOW4BV427TH3IK4S","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-6276557","https://security.snyk.io/vuln/SNYK-JS-SANITIZEHTML-6256334"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-rm97-x556-q36h","url":"https://osv.dev/vulnerability/GHSA-rm97-x556-q36h"}],"summary":"sanitize-html Information Exposure vulnerability"}