DOMPurify

DOMPurify '; // becomes DOMPurify.sanitize''; // becomes DOMPurify.sanitize''; // becomes DOMPurify.sanitize''; // becomes...

CVE-2024-48910-PoC

CVE-2024-48910-PoC Resumen CVE-2024-48910 DOMPurify, un sanitizador XSS solo para DOM, súper rápido y ultra tolerante para HTML, MathML y SVG, se encontró vulnerable a la contaminación de prototipos CVE-2024-48910. La vulnerabilidad fue descubierta y corregida en la versión 2.4.2, con la...

CLSA-2026-1789155876 TuxCare security update for dompurify (1 CVE)

TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.5.8-tuxcare.7...

CLSA-2026-1789155659 TuxCare security update for dompurify (2 CVEs)

TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 2.4.3-tuxcare.8...

CLSA-2026-1789155227 TuxCare security update for dompurify (1 CVE)

TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.5.9-tuxcare.7...

CLSA-2026-1789154458 TuxCare security update for dompurify (3 CVEs)

TuxCare rebuilt dompurify to address 3 CVEs. Fixed in 2.4.7-tuxcare.5...

CLSA-2026-1789154068 TuxCare security update for dompurify (2 CVEs)

TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 3.0.3-tuxcare.5...

CLSA-2026-1789153936 TuxCare security update for dompurify (1 CVE)

TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.4.0-tuxcare.5...

CLSA-2026-1789152222 TuxCare security update for dompurify (2 CVEs)

TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 2.3.0-tuxcare.5...

CLSA-2026-1789146735 TuxCare security update for dompurify (1 CVE)

TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.2.3-tuxcare.4...

CLSA-2026-1789146579 TuxCare security update for dompurify (1 CVE)

TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.1.6-tuxcare.8...

CLSA-2026-1789139223 TuxCare security update for dompurify (3 CVEs)

TuxCare rebuilt dompurify to address 3 CVEs. Fixed in 3.2.7-tuxcare.2...

CVE-2026-47423-dompurify-xss-detector

DOMPurify re-clone logic flaw. Instead of relying on easily stripped source comments or version variables, this tool performs logic fingerprinting on minified production JavaScript bundles to identify unpatched allowed-tag layouts. Vulnerability Summary In DOMPurify versions up to 3.4.4, the...

dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution

A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting XSS attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a .content. This oversight allows an attacke...

dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution

A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting XSS attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a .content. This oversight allows an attacke...

ROOT-APP-NPM-GHSA-76MC-F452-CXCM GHSA-76mc-f452-cxcm in dompurify - Patched by Root

Root has patched GHSA-76mc-f452-cxcm in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-65898 CVE-2026-65898 in dompurify - Patched by Root

Root has patched CVE-2026-65898 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-49978 CVE-2026-49978 in dompurify - Patched by Root

Root has patched CVE-2026-49978 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-CMWH-PVXP-8882 GHSA-cmwh-pvxp-8882 in dompurify - Patched by Root

Root has patched GHSA-cmwh-pvxp-8882 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-65902 CVE-2026-65902 in dompurify - Patched by Root

Root has patched CVE-2026-65902 in the dompurify package for Root:npm. Multiple fixed versions available...