Vulnerability index

Browse CVEs

2 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Express Xss Sanitizer HIGH 8.2

CVE-2026-33979

Express XSS Sanitizer is Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to preve…

Fix: 2.0.2+

Fix from $1,950 2026-03-27

Express Xss Sanitizer MEDIUM 6.1

CVE-2022-21169

The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allowing the attacker to bypass x…

Fix: 1.1.3+

Fix from $1,600 2022-09-26