Skip to content

Commit

Permalink
new vulnerability in dompurify
Browse files Browse the repository at this point in the history
  • Loading branch information
sampion88 committed Jan 30, 2025
1 parent e11f0d5 commit cac0850
Showing 1 changed file with 22 additions and 12 deletions.
34 changes: 22 additions & 12 deletions input/new.json
Original file line number Diff line number Diff line change
@@ -1,15 +1,25 @@
{
"package_name": "",
"patch_versions": [],
"vulnerable_ranges": [],
"cwe": [],
"tldr": "",
"doest_this_affect_me": "",
"how_to_fix": "",
"vulnerable_to": "",
"package_name": "dompurify",
"patch_versions": [
"3.2.4"
],
"vulnerable_ranges": [
[
"3.0.0",
"3.2.3"
]
],
"cwe": [
"CWE-79"
],
"tldr": "Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the `DOMPurify.sanitize` function.",
"doest_this_affect_me": "You are affected if you are using a version that falls within the vulnerable range.",
"how_to_fix": "Upgrade the `dompurify` library to a patch version.",
"reporter": "",
"vulnerable_to": "Cross-site Scripting (XSS)",
"related_cve_id": "",
"language": "",
"severity_class": "",
"aikido_score": 0,
"changelog": ""
"language": "JS",
"severity_class": "MEDIUM",
"aikido_score": 42,
"changelog": "https://github.com/cure53/DOMPurify/releases/tag/3.2.4"
}

0 comments on commit cac0850

Please sign in to comment.