{"action":"Upgrade sanitize-html to 1.11.4 or later.","affected":[{"fixed":"1.11.4","introduced":"0"}],"component":"sanitize-html","cve_ids":["CVE-2017-16016"],"ecosystem":"npm","epss":0.01336,"exploited":false,"fixed_versions":["1.11.4"],"ghsa_id":"GHSA-xc6g-ggrc-qq4r","id":"tcs_01M5KGHM58Z87Z3VAQ1JFC470B","modified_at":"2023-11-08T03:58:59.829428Z","published_at":"2018-11-09T17:47:23Z","references":["https://osv.dev/vulnerability/GHSA-xc6g-ggrc-qq4r","https://nvd.nist.gov/vuln/detail/CVE-2017-16016","https://github.com/punkave/sanitize-html/issues/100","https://github.com/punkave/sanitize-html/commit/5d205a1005ba0df80e21d8c64a15bb3accdb2403","https://github.com/punkave/sanitize-html/commit/5d205a1005ba0df80e21d8c64a15bb3accdb2403)))","https://github.com/advisories/GHSA-xc6g-ggrc-qq4r","https://npmjs.com/package/sanitize-html#discarding-the-entire-contents-of-a-disallowed-tag","https://www.npmjs.com/advisories/154"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xc6g-ggrc-qq4r","url":"https://osv.dev/vulnerability/GHSA-xc6g-ggrc-qq4r"},{"source":"nvd","source_id":"CVE-2017-16016","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16016"}],"summary":"Cross-Site Scripting in sanitize-html"}