@ampproject/worker-dom (>=0.1.0, <=0.9.0), @atom-ide-community/nuclide-adb (>=0.7.3-dev, <=0.7.8) +39 more potentially affected by CVE-2019-25155 via dompurify (>=1.0.3, <=1.0.10)

dompurify NPM version =1.0.3, =0.1.0, =0.7.3-dev, =0.7.3-dev, =0.7.3-dev, =0.7.3-dev, =0.7.3-dev, =0.15.0, =0.7.3-dev, =0.7.3-dev, =1.0.1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.12 and more Source cves: CVE-2019-25155 Source advisory: OSV:GHSA-8HGG-XXM5-3873...

CVE-2019-25155

DOMPurify before 1.0.11 is affected by a reverse tabnabbing issue in demos/hooks-target-blank-demo.html due to missing rel="noopener noreferrer" on links. This is the concrete vulnerability described across CVE-2019-25155 entries: the root cause is the absence of a security attribute on target-bl...