Skip to content

Update the sanitize-html library to the latest version #1107

Description

@matKlju

Description

An outdated version of the sanitize-html library is used in the backoffice and ServiceModule:

❯ grep -A1 'node_modules/sanitize-html' Buerokratt-Chatbot/GUI/packagelock.json
"node_modules/sanitize-html": {
"version": "2.17.3",
❯ grep -A1 'node_modules/sanitize-html' Service-Module/GUI/package-lock.json
"node_modules/sanitize-html": {
"version": "2.17.3",
Version 2.17.3 contains a known vulnerability which enables sanitization bypass leading to
XSS: GHSA-rpr9-rxv7-x643

Metadata

Metadata

Assignees

Labels

Type

Projects

Status
In Review

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions