{"api_version":"v1","generated_at":"2026-10-09T00:10:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-rgrove-sanitize-11674afdf9c7","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/sanitize","name":"sanitize","next_cursor":null,"observations":[{"affected":">= 3.0.0, < 6.0.2","affected_versions_present":true,"cve_id":"CVE-2023-36823","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36823","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T16:56:27.159Z","patch_url":"https://github.com/rgrove/sanitize/commit/76ed46e6dc70820f38efe27de8dabd54dddb5220","primary_source":"","published":"2023-07-06T15:06:00.509Z"},{"affected":">= 5.0.0, < 6.0.1","affected_versions_present":true,"cve_id":"CVE-2023-23627","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-23627","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-10T21:17:49.562Z","patch_url":"https://github.com/rgrove/sanitize/security/advisories/GHSA-fw3g-2h3j-qmm7","primary_source":"","published":"2023-01-27T23:44:17.617Z"},{"affected":">= 3.0.0, < 5.2.1","affected_versions_present":true,"cve_id":"CVE-2020-4054","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-4054","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T07:52:20.925Z","patch_url":"https://github.com/rgrove/sanitize/commit/a11498de9e283cd457b35ee252983662f7452aa9","primary_source":"","published":"2020-06-16T22:10:13.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"rgrove"}}