AIKIDO-2025-10126
github.com/mrz1836/go-sanitize is vulnerable to Cross-site Scripting (XSS)
58
Medium Risk
This Affects:
github.com/mrz1836/go-sanitizeTL;DR
Affected versions of this package are affected by improper input validation when manipulating DOM elements or attributes, such as document.cookies, window.location, and onload. Attackers can inject malicious JavaScript payloads into these DOM properties, which may result in the browser executing arbitrary scripts, leading to session hijacking, data exfiltration, and other client-side attacks.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
github.com/mrz1836/go-sanitize is vulnerable to Cross-site Scripting (XSS) in versions 1.0.0 - 1.3.3.
How to fix this
Upgrade the github.com/mrz1836/go-sanitize library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant