Debian/node-dompurify: medium 6.1
DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve template expressions in attached shadow roots when using RETURN_DOM, RETURN_DOM_FRAGMENT, or IN_PLA
Action: Upgrade node-dompurify to 3.4.17+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.4.17+dfsg-1 | - |
Fixed versions
| 3.4.17+dfsg-1 |
Sources
published · modified · JSON