Regular Expression Denial of Service (ReDoS)
CVE-2022-25887
5.3MEDIUM
What is CVE-2022-25887?
The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment removal.
Affected Version(s)
sanitize-html < 2.7.1
