Description
DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.7, DOMPurify IN_PLACE sanitization could skip shadow contents attached to an element inside
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 npm | | | 3.4.7 |
 debian 12 | | =2.4.1+dfsg+~2.4.0-1 || =2.4.1+dfsg+~2.4.0-2 || =2.4.1+dfsg+~2.4.0-2+deb12u1 || =3.0.9+dfsg+~3.0.5-1 || =3.1.6+dfsg+~3.0.5-1 || =3.1.7+dfsg+~3.0.5-1 || =3.1.7+dfsg+~3.0.5-2 || =3.2.5+dfsg-1 || =3.3.2+dfsg-1 || =3.3.3+dfsg-1 || =3.3.3+dfsg-2 || =3.4.1+dfsg-1 || =3.4.12+dfsg-1 || =3.4.13+dfsg-1 || =3.4.13+dfsg-2 || =3.4.16+dfsg-1 || =3.4.2+dfsg-1 || =3.4.5+dfsg-1 | - |
debian 13 | | =3.1.7+dfsg+~3.0.5-2 || =3.2.5+dfsg-1 || =3.3.2+dfsg-1 || =3.3.3+dfsg-1 || =3.3.3+dfsg-2 || =3.4.1+dfsg-1 || =3.4.12+dfsg-1 || =3.4.13+dfsg-1 || =3.4.13+dfsg-2 || =3.4.16+dfsg-1 || =3.4.2+dfsg-1 || =3.4.5+dfsg-1 | - |
debian 14 | | =3.1.7+dfsg+~3.0.5-2 || =3.2.5+dfsg-1 || =3.3.2+dfsg-1 || =3.3.3+dfsg-1 || =3.3.3+dfsg-2 || =3.4.1+dfsg-1 || =3.4.2+dfsg-1 || =3.4.5+dfsg-1 || >=0 <3.4.12+dfsg-1 | 3.4.12+dfsg-1 |
 rpm rhel10 | | | 0:1.1.2-1.el10_2 |
