CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor archive
2 CVEs tagged to vendor express_xss_sanitizer_project — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.
Express XSS Sanitizer is Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS)…
The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allowing the attacker to bypass xss sanitization.