Express XSS Sanitizer project
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Express XSS Sanitizer | 1 | – | Sep 14, 2025 |
Exploited and recent CVEs
- CVE-2025-59364 The express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body. 0.4%