929 matches found
DOMPurify
DOMPurify '; // becomes DOMPurify.sanitize''; // becomes DOMPurify.sanitize''; // becomes DOMPurify.sanitize''; // becomes...
CVE-2024-48910-POC
CVE-2024-48910 Prueba de Concepto Esta es una prueba de concepto para CVE-2024-48910. Esta es una vulnerabilidad que estaba presente en DOMPurify, un sanitizador XSS para HTML, SVG y MathML. Esta versión de DOMPurify es vulnerable a la contaminación de prototipos, donde un atacante puede inyectar...
CLSA-2026-1789404783 TuxCare security update for dompurify (2 CVEs)
TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 3.4.8-tuxcare.4...
CLSA-2026-1789400953 TuxCare security update for dompurify (4 CVEs)
TuxCare rebuilt dompurify to address 4 CVEs. Fixed in 3.2.7-tuxcare.3...
CVE-2024-48910-PoC
CVE-2024-48910-PoC Resumen CVE-2024-48910 DOMPurify, un sanitizador XSS solo para DOM, súper rápido y ultra tolerante para HTML, MathML y SVG, se encontró vulnerable a la contaminación de prototipos CVE-2024-48910. La vulnerabilidad fue descubierta y corregida en la versión 2.4.2, con la...
CLSA-2026-1789155876 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.5.8-tuxcare.7...
CLSA-2026-1789155659 TuxCare security update for dompurify (2 CVEs)
TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 2.4.3-tuxcare.8...
CLSA-2026-1789155227 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.5.9-tuxcare.7...
CLSA-2026-1789154458 TuxCare security update for dompurify (3 CVEs)
TuxCare rebuilt dompurify to address 3 CVEs. Fixed in 2.4.7-tuxcare.5...
CLSA-2026-1789154068 TuxCare security update for dompurify (2 CVEs)
TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 3.0.3-tuxcare.5...
CLSA-2026-1789153936 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.4.0-tuxcare.5...
CLSA-2026-1789152222 TuxCare security update for dompurify (2 CVEs)
TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 2.3.0-tuxcare.5...
CLSA-2026-1789146735 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.2.3-tuxcare.4...
CLSA-2026-1789146579 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.1.6-tuxcare.8...
CLSA-2026-1789139223 TuxCare security update for dompurify (3 CVEs)
TuxCare rebuilt dompurify to address 3 CVEs. Fixed in 3.2.7-tuxcare.2...
CVE-2026-47423-dompurify-xss-detector
DOMPurify re-clone logic flaw. Instead of relying on easily stripped source comments or version variables, this tool performs logic fingerprinting on minified production JavaScript bundles to identify unpatched allowed-tag layouts. Vulnerability Summary In DOMPurify versions up to 3.4.4, the...
dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution
A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting XSS attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a .content. This oversight allows an attacke...
dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution
A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting XSS attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a .content. This oversight allows an attacke...