GHSA-pgjv-jrg2-gq3v
dompurify vulnerable to Cross-site Scripting
No scoreFix available
dompurify prior to version 2.2.2 is vulnerable to cross-site scripting when converting from SVG namespace.
What each source reports
GitHub AdvisoriesNo score
dompurify vulnerable to Cross-site Scripting
dompurify prior to version 2.2.2 is vulnerable to cross-site scripting when converting from SVG namespace.
- Record
GHSA-pgjv-jrg2-gq3v- Updated
- 2026-11-02
OSVNo score
dompurify vulnerable to Cross-site Scripting
dompurify prior to version 2.2.2 is vulnerable to cross-site scripting when converting from SVG namespace.
- Record
GHSA-pgjv-jrg2-gq3v- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dompurifyPyPI | before 2.2.2 | 2.2.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-pgjv-jrg2-gq3v is a vulnerability with no CVSS score yet in dompurify, published January 11, 2023. No source lists public exploit code. Fixed in dompurify 2.2.2.