CVE-2024-48910: DOMPurify vulnerable to tampering by prototype polution
(updated )
dompurify was vulnerable to prototype pollution
Fixed by https://github.com/cure53/DOMPurify/commit/d1dd0374caef2b4c56c3bd09fe1988c3479166dc
References
- github.com/advisories/GHSA-p3vf-v8qc-cwcr
- github.com/cure53/DOMPurify
- github.com/cure53/DOMPurify/commit/d1dd0374caef2b4c56c3bd09fe1988c3479166dc
- github.com/cure53/DOMPurify/security/advisories/GHSA-p3vf-v8qc-cwcr
- lists.debian.org/debian-lts-announce/2025/02/msg00010.html
- nvd.nist.gov/vuln/detail/CVE-2024-48910
Code Behaviors & Features
Detect and mitigate CVE-2024-48910 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →