Skip to content
OpenAdvisories

Package · npm

dom-expressions

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.3
    CVE-2025-27108

    Cross-site Scripting vulnerability due to improper use of string.replace in dom-expressions

    dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's `.replace()` opens up to potential Cross-site Scripting (XSS) vulnerabilities with the special replacement patterns beginning with `$`. Partic…

    ryansolid dom-expressions dom-expressions npm