CRITICAL 10.0 npm
DOMpurify has a nesting-based mXSS
GHSA-gx9m-whjm-85jf · CVE-2024-47875
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
References
- WEB https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-47875
- WEB https://github.com/cure53/DOMPurify/commit/0ef5e537a514f904b6aa1d7ad9e749e365d7185f
- WEB https://github.com/cure53/DOMPurify/commit/6ea80cd8b47640c20f2f230c7920b1f4ce4fdf7a
- PACKAGE https://github.com/cure53/DOMPurify
- WEB https://github.com/cure53/DOMPurify/blob/0ef5e537a514f904b6aa1d7ad9e749e365d7185f/test/test-suite.js#L2098
- WEB https://lists.debian.org/debian-lts-announce/2025/02/msg00010.html
- WEB http://seclists.org/fulldisclosure/2025/Apr/14
Ready to move
Start Securing
Free, no credit card | First findings in minutes