Vulnerabilities

TI-2021-06252 CVE-2021-23900 · GHSA-8rf5-92jh-3vc9

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared…

LOW 37

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02125 Published 2021-01-13 Fixed in 1.2.2 CWE-248

TI-2021-06251 CVE-2021-23899 · GHSA-mm8j-9x84-m9cv

MEDIUM 46

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02093 Published 2021-01-13 Fixed in 1.2.2 CWE-611

TI-2020-10947 CVE-2020-13973 · GHSA-g8jj-899q-8x3j

LOW 29

OWASP json-sanitizer before 1.2.1 allows XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01123 Published 2020-06-09 Fixed in 1.2.1 CWE-79