CVE-2025-59364

Medium CVSS: 5.3

The express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body.

Vendor

Product

CWE

CWE-674

Yayın Tarihi

2025-09-14 23:15:37

Güncelleme

2025-09-15 15:21:42

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-674 MEDIUM 2025

Referanslar

https://gist.github.com/Spendroslav/177804eaef5acfb222a550de212a1b94 https://github.com/AhmedAdelFahim/express-xss-sanitizer https://www.npmjs.com/package/express-xss-sanitizer