UnratedFix available
DOMPurify 3.4.13
DOMPurify 3.4.13 fixes issues involving hook removal, clone-guard bypass, and DOM clobbering during IN_PLACE sanitization.
Announced Group revision 1
Original source ↗github-cure53-dompurify
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
DOMPurify 3.4.13 Fixed an issue with hook removal during IN_PLACE sanitization, thanks @koyokr Fixed an issue with hooks potentially bypassing the clone guard, thanks @AkshayJainG Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @AkshayJainG Bumped several dependencies where possible
DOMPurify
DOMPurify 3.4.13
- Affected versions
- Not stated in this extraction
- Fixed versions
- 3.4.13
DOMPurify 3.4.13
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.
- Event
- #86388 · Revision 1
- Added to Heist Feed
- Publisher date