Skip to content
iPatch
Search CVEs, vendors, products
/
Log in
Start free
Today
Exploited tracker
Weekly brief
Vendors
How it works
Trust
Pricing
Vendors
/
Express XSS Sanitizer project
/
Express XSS Sanitizer
Express XSS Sanitizer project Express XSS Sanitizer
CVE-2025-59364
Medium
5.3
The express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body.
0.4%