Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

dompurify

npm

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's written in JavaScript and works in all modern browsers (Safari, Opera (15+), Internet Explorer (10+), Firefox and Chrome - as well as almost anything else usin

View on github.com · View on npmjs.org

Security Advisories for dompurify in npm

High
1 day ago

DOMPurify XSS via selectedcontent re-clone GSA_kwCzR0hTQS04N3hnLXB4eDItN2h2eM4ABX4O

npm dompurify
Moderate
about 1 month ago

DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix) GSA_kwCzR0hTQS1oN213LWdwdnIteHE0bc4ABVoP

npm dompurify
Moderate
about 1 month ago

DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode GSA_kwCzR0hTQS1jcnY1LTl2d3ctcTNnOM4ABVoO

npm dompurify
Moderate
about 1 month ago

DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallback GSA_kwCzR0hTQS12OWpyLXJnNTMtOXBncM4ABVoN

npm dompurify
Moderate
about 2 months ago

DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation GSA_kwCzR0hTQS0zOXEyLTk0cmMtOTVjcM4ABVWZ

npm dompurify
Moderate
2 months ago

DOMPurify ADD_ATTR predicate skips URI validation GSA_kwCzR0hTQS1jam1tLWY0amMtcXc4cs4ABUrA

npm dompurify
Moderate
2 months ago

DOMPurify USE_PROFILES prototype pollution allows event handlers GSA_kwCzR0hTQS1jajYzLWpoaHItd2N4ds4ABUq_

npm dompurify
Moderate
2 months ago

DOMPurify is vulnerable to mutation-XSS via Re-Contextualization GSA_kwCzR0hTQS1oOHI4LXdjY3ItdjVmMs4ABUZm

npm dompurify
Moderate
3 months ago

DOMPurify contains a Cross-site Scripting vulnerability GSA_kwCzR0hTQS12OGptLTV2d3gtY2Z4bc4ABTDE

npm dompurify
Moderate
3 months ago

DOMPurify contains a Cross-site Scripting vulnerability GSA_kwCzR0hTQS12MndqLTd3cHEtYzh2ds4ABTDL

npm dompurify
Moderate
over 1 year ago

DOMPurify allows Cross-site Scripting (XSS) GSA_kwCzR0hTQS12aHhmLTd2cXItbXJqZ84ABEeY

npm dompurify
Critical
over 1 year ago

DOMPurify vulnerable to tampering by prototype polution GSA_kwCzR0hTQS1wM3ZmLXY4cWMtY3djcs4ABA13

npm dompurify
Potential
High
over 1 year ago

Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify GSA_kwCzR0hTQS1tNGdxLXgyNGotanBtZs4ABAkl

npm mermaid
High
over 1 year ago

DOMpurify has a nesting-based mXSS GSA_kwCzR0hTQS1neDltLXdoam0tODVqZs4ABANT

npm dompurify
High
over 1 year ago

DOMPurify allows tampering by prototype pollution GSA_kwCzR0hTQS1tbWh4LWhtanItcjY3NM4AA_kd

npm dompurify
Moderate
over 2 years ago

DOMPurify Open Redirect vulnerability GSA_kwCzR0hTQS04aGdnLXh4bTUtMzg3M84AA3ID

npm dompurify
Repackage
Moderate
over 3 years ago

dompurify vulnerable to Cross-site Scripting GSA_kwCzR0hTQS1oNnAzLXA0dngtd3I4cc4AAw6h

pypi dompurify
Repackage
Moderate
over 3 years ago

dompurify vulnerable to Cross-site Scripting GSA_kwCzR0hTQS1wZ2p2LWpyZzItZ3Ezds4AAw6g

pypi dompurify
Moderate
over 5 years ago

Cross-site Scripting in dompurify MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTYzcTctaDg5NS1tOTgy

npm dompurify
Critical
over 5 years ago

Cross-Site Scripting in dompurify MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1qanEtYzg4cS1xaHI2

npm dompurify
Moderate
almost 6 years ago

Cross-Site Scripting in dompurify MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNocWotajRmaC1ydzdt

npm dompurify

Filter by Severity

Moderate 15 High 4 Critical 2