Mike Samuel

Name of the Vulnerable Software and Affected Versions: OWASP json-sanitizer versions prior to 1.2.2 Description: The issue allows an attacker to inject arbitrary HTML or XML into embedding documents by emitting closing SCRIPT tags and CDATA section delimiters for crafted input. Recommendations: For versions prior to 1.2.2, update to version 1.2.2 or later to resolve the issue. As a temporary workaround, consider restricting the input to the json-sanitizer to minimize the risk of exploitation.