CVE-2022-25887 — Regular Expression Denial of Service (ReDoS)
The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment…
Published: 2022-08-30 · CVSS: 5.3 · CVSS 3.1
The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment removal.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7