927 matches found
DOMPurify
DOMPurify DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's also very simple to use and get started with. DOMPurify was started in February 2014 and, meanwhile, has reached version v3.4.15. DOMPurify runs as JavaScript and works in all modern browsers...
CVE-2024-48910-PoC
CVE-2024-48910-PoC Overview CVE-2024-48910 DOMPurify, a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG, was found to be vulnerable to prototype pollution CVE-2024-48910. The vulnerability was discovered and fixed in version 2.4.2, with the initial disclosure made on...
CLSA-2026-1789155876 TuxCare security update for DOMPurify (1 CVE)
TuxCare rebuilt DOMPurify to address 1 CVE. Fixed in 2.5.8-tuxcare.7...
CLSA-2026-1789155659 TuxCare security update for DOMPurify (2 CVEs)
TuxCare rebuilt DOMPurify to address 2 CVEs. Fixed in 2.4.3-tuxcare.8...
CLSA-2026-1789155227 TuxCare security update for DOMPurify (1 CVE)
TuxCare rebuilt DOMPurify to address 1 CVE. Fixed in 2.5.9-tuxcare.7...
CLSA-2026-1789154458 TuxCare security update for DOMPurify (3 CVEs)
TuxCare rebuilt DOMPurify to address 3 CVEs. Fixed in 2.4.7-tuxcare.5...
CLSA-2026-1789154068 TuxCare security update for DOMPurify (2 CVEs)
TuxCare rebuilt DOMPurify to address 2 CVEs. Fixed in 3.0.3-tuxcare.5...
CLSA-2026-1789153936 TuxCare security update for DOMPurify (1 CVE)
TuxCare rebuilt DOMPurify to address 1 CVE. Fixed in 2.4.0-tuxcare.5...
CLSA-2026-1789152222 TuxCare security update for DOMPurify (2 CVEs)
TuxCare rebuilt DOMPurify to address 2 CVEs. Fixed in 2.3.0-tuxcare.5...
CLSA-2026-1789146735 TuxCare security update for DOMPurify (1 CVE)
TuxCare rebuilt DOMPurify to address 1 CVE. Fixed in 3.2.3-tuxcare.4...
CLSA-2026-1789146579 TuxCare security update for DOMPurify (1 CVE)
TuxCare rebuilt DOMPurify to address 1 CVE. Fixed in 3.1.6-tuxcare.8...
CLSA-2026-1789139223 TuxCare security update for DOMPurify (3 CVEs)
TuxCare rebuilt DOMPurify to address 3 CVEs. Fixed in 3.2.7-tuxcare.2...
CVE-2026-47423-dompurify-xss-detector
DOMPurify re-clone logic flaw. Instead of relying on easily stripped source comments or version variables, this tool performs logic fingerprinting on minified production JavaScript bundles to identify unpatched allowed-tag layouts. Vulnerability Summary In DOMPurify versions up to 3.4.4, the...
dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution
A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting XSS attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a .content. This oversight allows an attacke...
dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution
A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting XSS attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a .content. This oversight allows an attacke...
ROOT-APP-NPM-GHSA-76MC-F452-CXCM GHSA-76mc-f452-cxcm in dompurify - Patched by Root
Root has patched GHSA-76mc-f452-cxcm in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-65898 CVE-2026-65898 in dompurify - Patched by Root
Root has patched CVE-2026-65898 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-CMWH-PVXP-8882 GHSA-cmwh-pvxp-8882 in dompurify - Patched by Root
Root has patched GHSA-cmwh-pvxp-8882 in the dompurify package for Root:npm. Multiple fixed versions available...