Dompurify Security Vulnerabilities and Issues — Dompurify CVE List

Lucene search

Cure53Dompurify

3 matches found

CVE•added 2024/09/16 7:16 p.m.•373 views

CVE-2024-45801

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It has been discovered that malicious HTML using special nesting techniques can bypass the depth checking added to DOMPurify in recent releases. It was also possible to use Prototype Pollution to weaken the d...

7.3CVSS6.7AI score0.00095EPSS

CVE•added 2024/10/11 3:15 p.m.•249 views

CVE-2024-47875

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3.

10CVSS8.2AI score0.00544EPSS

CVE•added 2024/10/31 3:15 p.m.•174 views

CVE-2024-48910

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2.

9.1CVSS8.6AI score0.00135EPSS