← Database

CVE-2022-25887

MEDIUM CVSS: 5.3 Published: 2022-08-30 Modified: 2026-06-17

Description

The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment removal.

Affected Platforms

Apostrophecms Sanitize-Html

Weakness Type

CWE-1333

References