Description
An outdated version of the sanitize-html library is used in the backoffice and ServiceModule:
❯ grep -A1 'node_modules/sanitize-html' Buerokratt-Chatbot/GUI/packagelock.json
"node_modules/sanitize-html": {
"version": "2.17.3",
❯ grep -A1 'node_modules/sanitize-html' Service-Module/GUI/package-lock.json
"node_modules/sanitize-html": {
"version": "2.17.3",
Version 2.17.3 contains a known vulnerability which enables sanitization bypass leading to
XSS: GHSA-rpr9-rxv7-x643
Description
An outdated version of the sanitize-html library is used in the backoffice and ServiceModule:
❯ grep -A1 'node_modules/sanitize-html' Buerokratt-Chatbot/GUI/packagelock.json
"node_modules/sanitize-html": {
"version": "2.17.3",
❯ grep -A1 'node_modules/sanitize-html' Service-Module/GUI/package-lock.json
"node_modules/sanitize-html": {
"version": "2.17.3",
Version 2.17.3 contains a known vulnerability which enables sanitization bypass leading to
XSS: GHSA-rpr9-rxv7-x643