What’s Vulnerable › Products

express-xss-sanitizer vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your express-xss-sanitizer version is affected

Latest express-xss-sanitizer vulnerabilities

• CVE-2026-33979 — Express XSS Sanitizer: allowedTags/allowedAttributes bypass leads to permissive sanitization (XSS risk) (CVSS 8.2)
• CVE-2025-59364 — (CVSS 5.3)
• CVE-2022-21169 — Prototype Pollution (CVSS 6.1)