1644 matches found
DOMPurify
DOMPurify DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's also very simple to use and get started with. DOMPurify was started in February 2014 and, meanwhile, has reached version v3.4.18. DOMPurify runs as JavaScript and works in all modern browsers...
CVE-2024-48910-POC
CVE-2024-48910 Proof of Concept This is a proof of concept for CVE-2024-48910. This is a vulnerability that was present in DOMPurify, an XSS sanitizer for HTML, SVG, and MathML. This version of DOMPurify is vulnerable to prototype pollution, where an atatcker can inject properties into any JS...
CVE-2024-48910-PoC
CVE-2024-48910-PoC Overview CVE-2024-48910 DOMPurify, a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG, was found to be vulnerable to prototype pollution CVE-2024-48910. The vulnerability was discovered and fixed in version 2.4.2, with the initial disclosure made on...
CVE-2026-47423-dompurify-xss-detector
DOMPurify re-clone logic flaw. Instead of relying on easily stripped source comments or version variables, this tool performs logic fingerprinting on minified production JavaScript bundles to identify unpatched allowed-tag layouts. Vulnerability Summary In DOMPurify versions up to 3.4.4, the...
ROOT-APP-NPM-CVE-2026-65914 CVE-2026-65914 in dompurify - Patched by Root
Root has patched CVE-2026-65914 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-49978 CVE-2026-49978 in dompurify - Patched by Root
Root has patched CVE-2026-49978 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-MRV2-3PQR-J5JR GHSA-mrv2-3pqr-j5jr in dompurify - Patched by Root
Root has patched GHSA-mrv2-3pqr-j5jr in the dompurify package for Root:npm. Multiple fixed versions available...
CLSA-2026-1793867540 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.3.3-tuxcare.6...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in dompurify (CVE-2026-75838)
Summary A Cross-Site Scripting XSS vulnerability in the dompurify package CVE-2026-75838 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 3.4.13 in FP-15 on Linux operating systems Vulnerability Details CVEID:CVE-2026-75838 DESCRIPTION: DOMPurif...
ROOT-APP-NPM-GHSA-CG2G-XH64-V4Q7 GHSA-cg2g-xh64-v4q7 in dompurify - Patched by Root
Root has patched GHSA-cg2g-xh64-v4q7 in the dompurify package for Root:npm. Multiple fixed versions available...
CLEANSTART-2026-QU63967 DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG
Security vulnerability affects the frappe-helpdesk package. DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG...
Security Bulletin: Multiple secuirty vulnerabilities addressed with IBM Business Automation Workflow containers October 2026
Summary In addition to updating many operating system level packages, IBM Business Automation Workflow container fixes address the following vulnerabilities. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that la...
Security Bulletin: IBM Test Accelerator for Z uses dompurify-3.4.13.tgz which is vulnerable to CVE-2026-109344, CVE-2026-109345
Summary Security Bulletin: IBM Test Accelerator for Z uses dompurify-3.4.13.tgz which is vulnerable to CVE-2026-109344, CVE-2026-109345. This security bulletin provides details about the vulnerability and the corresponding remediation. Vulnerability Details CVEID:CVE-2026-109344 DESCRIPTION:...
CLSA-2026-1793352238 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.4.13-tuxcare.4...
CLSA-2026-1793350195 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.4.15-tuxcare.4...
CLSA-2026-1793349839 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.4.11-tuxcare.6...
CLSA-2026-1793349529 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.4.14-tuxcare.5...
CLSA-2026-1793349051 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.4.12-tuxcare.4...