Lucene search
+L

1 matches found

OSV
OSV
added 2024/09/16 8:34 p.m.17 views

GHSA-MMHX-HMJR-R674 DOMPurify allows tampering by prototype pollution

It has been discovered that malicious HTML using special nesting techniques can bypass the depth checking added to DOMPurify in recent releases. It was also possible to use Prototype Pollution to weaken the depth check. This renders dompurify unable to avoid XSS attack. Fixed by...

8.3CVSS7AI score0.00844EPSS
SaveExploits0References5
Rows per page
Query Builder