| Package | Affected versions | Patched versions |
|---|---|---|
| safehtml | = 1.3.0 |
Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to bypass cross-site scripting (XSS) protection via (1) "decimal HTML entities" or (2) "the \x00 symbol."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free