GitHub Advisoryadvisory · PyPI

GHSA-h6p3-p4vx-wr8q dompurify vulnerable to Cross-site Scripting

MEDIUM Published 2023-01-11 Modified 2023-01-11 Official page ↗

Ecosystem: PyPI
Packages: dompurify
Severity: Moderate
Reviewed: 2023-01-11

Affected packages

• PyPI dompurify: < 2.2.3 → fixed in 2.2.3

Description

dompurify prior to version 2.2.3 is vulnerable to a cross-site scripting problem caused by nested headlines.

References