Vulnerabilities
Summary — last 7 days
New vulnerabilities4,712▼ 554 vs. last week
Critical / high1,828▼ 1,231 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)811▲ 709 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5.3) | 1.1% | — | Striptags Project Striptags | 6/18/2021 | 6/17/2026 | The npm package "striptags" is an implementation of PHP's strip_tags in Typescript. In striptags before version 3.2.0, a type-confusion vulnerability can cause `striptags` to concatenate unsanitized strings when an array-like object is passed in as the `html` parameter. This can be abused by an attacker who can… |