H5P-Nodejs-library vulnerabilities
CVEs whose affected-version data names the H5P-Nodejs-library package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-7062Medium· 5.2A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module `h5p-nodejs-library` by Lumi Education UG in versions up to and including 10.0.4
A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module `h5p-nodejs-library` by Lumi Education UG in versions up to and including 10.0.4. The library allows users to upload H5P content that contains malici…
▾ SunlitLumi Education UG · h5p-nodejs-libraryEPSS 0.30%via NVD
CVE-2025-47828Medium· 6.4Lumi H5P-Nodejs-library before 9.3.3 omits a sanitizeHtml call for plain text strings.
Lumi H5P-Nodejs-library before 9.3.3 omits a sanitizeHtml call for plain text strings.
▾ SunlitLumi · H5P-Nodejs-libraryEPSS 0.24%via NVD