← Database

CVE-2024-48910

CRITICAL CVSS: 9.1 Published: 2024-10-31 Modified: 2026-06-17

Description

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2.

Affected Platforms

Cure53 Dompurify

Weakness Type

CWE-1321

References