GitHub Advisoryadvisory · PyPI

GHSA-pgjv-jrg2-gq3v dompurify vulnerable to Cross-site Scripting

MEDIUM Published 2023-01-11 Modified 2023-01-11 Official page ↗

Ecosystem: PyPI
Packages: dompurify
Severity: Moderate
Reviewed: 2023-01-11

Affected packages

• PyPI dompurify: < 2.2.2 → fixed in 2.2.2

Description

dompurify prior to version 2.2.2 is vulnerable to cross-site scripting when converting from SVG namespace.

References