{"action":"Upgrade @jitbit/htmlsanitizer to 2.0.3 or later.","affected":[{"fixed":"2.0.3","introduced":"0"}],"component":"@jitbit/htmlsanitizer","cve_ids":["CVE-2025-29771"],"ecosystem":"npm","epss":0.00404,"exploited":false,"fixed_versions":["2.0.3"],"ghsa_id":"GHSA-vhv4-fh94-jm5x","id":"tcs_01M5KGC1SHR11GY1SR699HM8X3","modified_at":"2025-03-14T21:41:26Z","published_at":"2025-03-14T19:54:52Z","references":["https://osv.dev/vulnerability/GHSA-vhv4-fh94-jm5x","https://github.com/jitbit/HtmlSanitizer/security/advisories/GHSA-vhv4-fh94-jm5x","https://nvd.nist.gov/vuln/detail/CVE-2025-29771","https://github.com/jitbit/HtmlSanitizer/commit/af6d2a78877e7277cd01c825b7fb50edb5956963","https://github.com/jitbit/HtmlSanitizer"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vhv4-fh94-jm5x","url":"https://osv.dev/vulnerability/GHSA-vhv4-fh94-jm5x"}],"summary":"JS Html Sanitizer allows XSS when used with contentEditable"}