{"id":"ROOT-APP-NPM-CVE-2021-26539","summary":"CVE-2021-26539 in @rootio/sanitize-html - Patched by Root","details":"Root has patched CVE-2021-26539 in the @rootio/sanitize-html package for Root:npm. Multiple fixed versions available.","modified":"2026-06-05T01:30:45.290906896Z","published":"2026-06-04T20:57:52Z","upstream":["CVE-2021-26539"],"database_specific":{"severity":"MEDIUM","source":"Root","distro":"npm","distro_version":""},"affected":[{"package":{"name":"@rootio/sanitize-html","ecosystem":"Root:npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-root.io.7"},{"fixed":"1.4.2-root.io.8"},{"fixed":"1.4.2-root.io.9"}]}],"database_specific":{"upstream_version":"1.4.2-root.io.9","all_fixed_versions":["1.4.2-root.io.7","1.4.2-root.io.8","1.4.2-root.io.9"],"root_patch_version":"","root_patched":true,"total_fixed_versions":3,"source":"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2021-26539.json"}},{"package":{"name":"sanitize-html","ecosystem":"Root:npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-aikido.9"}]}],"database_specific":{"root_patched":true,"source":"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2021-26539.json","total_fixed_versions":1,"upstream_version":"1.4.2-aikido.9","all_fixed_versions":["1.4.2-aikido.9"],"root_patch_version":""}}],"schema_version":"1.7.5"}