Skip to content
OpenAdvisories

Vendor

ryansolid

1 known vulnerabilities.

Products

dom-expressions 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2025-27108

    Cross-site Scripting vulnerability due to improper use of string.replace in dom-expressions

    dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's `.replace()` opens up to potential Cross-site Scripting (XSS) vulnerabilities with the special replacement patterns beginning with `$`. Partic…

    ryansolid dom-expressions dom-expressions npm