Express XSS Sanitizer project vulnerabilities and threats

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2025-59364Express XSS Sanitizer · Uncontrolled Recursion Medium5.3EPSS 0.4%2025-09-14CVE Database V5CVE-2025-59364 The express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body. EPSS 0.4%Vulnerability Express XSS Sanitizer project CWE-674	CVE Database V5	2025-09-14

Page 1 of 1