Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/bleach@0.1.4
purl pkg:npm/bleach@0.1.4
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2014-8881

Regular Expression Denial of Service bleach is vulnerable to regular expression denial of service (ReDoS) when certain types of input … There are no reported fixed by versions.
GHSA-5634-rv46-48jf
Aliases:
GMS-2020-707
Cross-Site Scripting in bleach All versions of `bleach` are vulnerable to Cross-Site Scripting. It is possible to bypass the package's … There are no reported fixed by versions.
GHSA-mvmf-cvfx-qg55
Aliases:
CVE-2014-8881
Regular Expression Denial of Service in bleach All versions of the `bleach` package are vulnerable to a regular expression denial … There are no reported fixed by versions.
This package is not known to fix any advisories.