Advisories for Npm/Bleach package

2020
2015

Regular Expression Denial of Service

bleach is vulnerable to regular expression denial of service (ReDoS) when certain types of input is passed into the sanitize function. This can lead to long processing time, hanging the process while they occur.