~ / search / GHSA-m7gm-v253-56hh

GHSA-m7gm-v253-56hh

@lumieducation/h5p-server Fails to Sanitize Plain Text Strings

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-47828

Packages

EcosystemPackageAffectedFixed in
npm @lumieducation/h5p-server < 9.3.3 9.3.3

Details

As written in the advisory (Markdown source, shown as plain text).

Lumi H5P-Nodejs-library before 9.3.3 omits a sanitizeHtml call for plain text strings.

References

External links from the advisory. They lead to third-party sites.