Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-pgjv-jrg2-gq3v: dompurify vulnerable to Cross-site Scripting

dompurify prior to version 2.2.2 is vulnerable to cross-site scripting when converting from SVG namespace.

ghsa
#xss#git

dompurify vulnerable to Cross-site Scripting

Moderate severity GitHub Reviewed Published Jan 11, 2023

ghsa: Latest News

GHSA-xrrq-rrgq-h89w: static-alloc vulnerability leads to uninitialized read after allocating MemBump