Library with vulnerability
-
The DOMPurify library version 3.1.7 has known vulnerabilities (see: https://security.snyk.io/package/npm/dompurify/3.1.7). A vulnerability was published on February 14, 2025, nearly a year ago, and multiple new versions have been released since then. The current recommendation is to use version 3.2.4 or higher to avoid the XSS vulnerability identified in version 3.1.7. The latest version available is 3.3.1.
Is it possible to upgrade the library to mitigate the current vulnerabilities?
Viewing 3 replies - 1 through 3 (of 3 total)
Viewing 3 replies - 1 through 3 (of 3 total)
You must be logged in to reply to this topic.
