~ / search / GHSA-p3vf-v8qc-cwcr

GHSA-p3vf-v8qc-cwcr

DOMPurify vulnerable to tampering by prototype polution

Source: GitHub Advisory Database (reviewed) Critical CVE-2024-48910

Packages

EcosystemPackageAffectedFixed in
npm dompurify < 2.4.2 2.4.2

Details

As written in the advisory (Markdown source, shown as plain text).

dompurify was vulnerable to prototype pollution Fixed by https://github.com/cure53/DOMPurify/commit/d1dd0374caef2b4c56c3bd09fe1988c3479166dc

References

External links from the advisory. They lead to third-party sites.