PT-2023-33047 · Dompurify · Dompurify

Publicado 2023-01-11 · Atualizado 2023-01-11

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions dompurify versions prior to 2.2.2

Description The issue is related to cross-site scripting when converting from the SVG namespace.

Recommendations For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue.

Identificadores relacionados

GHSA-PGJV-JRG2-GQ3V

Produtos afetados

Dompurify

Referências · 5

• https://github.com/cure53/DOMPurify · Nota
• https://github.com/cure53/DOMPurify/issues/482 · Nota
• https://github.com/cure53/DOMPurify/releases/tag/2.2.2 · Nota
• https://osv.dev/vulnerability/GHSA-pgjv-jrg2-gq3v · Aviso do Fabricante
• https://security.snyk.io/vuln/SNYK-JS-DOMPURIFY-1035544 · Nota