Critical DSA-5790-1 1 CVE

node-dompurify - security update

Published Oct 13, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 12	node-dompurify	2.4.1+dfsg+~2.4.0-2

Vulnerabilities 1

Critical 10.0

CVE-2024-47875 Public exploit

DOMPurify nesting-based mXSS

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3.

cure53 DOMPurify cacti argo-workflows Debian Ubuntu Wolfi npm

Oct 11, 2024