CVE-2025-59364 – Express XSS Sanitizer Unbounded Recursion Depth Vulnerability

CVE ID : CVE-2025-59364

Published : Sept. 14, 2025, 11:15 p.m. | 1 hour, 36 minutes ago

Description : The express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body.

Severity: 5.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…