| Package | Affected versions | Patched versions |
|---|---|---|
| dompurify | < 2.0.7 | 2.0.7 |
Versions of dompurify prior to 2.0.7 are vulnerable to Cross-Site Scripting (XSS). It is possible to bypass the package sanitization through Mutation XSS, which may allow an attacker to execute arbitrary JavaScript in a victim's browser.
Upgrade to version 2.0.7 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free