Skip to content

Commit

Permalink
Add CVE-2024-47875 for DOMPurify
Browse files Browse the repository at this point in the history
  • Loading branch information
@eoftedal
eoftedal committed Oct 11, 2024
1 parent 52983bb commit f419da0
Show file tree
Hide file tree
Showing 5 changed files with 220 additions and 0 deletions.
28 changes: 28 additions & 0 deletions repository/jsrepository-master.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -3177,6 +3177,34 @@
"bowername": ["dompurify", "DOMPurify"],
"npmname": "dompurify",
"vulnerabilities": [
{
"ranges": [
{
"atOrAbove": "0",
"below": "2.5.0"
},
{
"atOrAbove": "3.0.0",
"below": "3.1.3"
}
],
"summary": "DOMpurify has a nesting-based mXSS",
"cwe": ["CWE-79"],
"severity": "high",
"identifiers": {
"CVE": ["CVE-2024-47875"],
"githubID": "GHSA-gx9m-whjm-85jf"
},
"info": [
"https://github.com/advisories/GHSA-gx9m-whjm-85jf",
"https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf",
"https://nvd.nist.gov/vuln/detail/CVE-2024-47875",
"https://github.com/cure53/DOMPurify/commit/0ef5e537a514f904b6aa1d7ad9e749e365d7185f",
"https://github.com/cure53/DOMPurify/commit/6ea80cd8b47640c20f2f230c7920b1f4ce4fdf7a",
"https://github.com/cure53/DOMPurify",
"https://github.com/cure53/DOMPurify/blob/0ef5e537a514f904b6aa1d7ad9e749e365d7185f/test/test-suite.js#L2098"
]
},
{
"ranges": [
{
Expand Down
48 changes: 48 additions & 0 deletions repository/jsrepository-v2.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4471,6 +4471,30 @@
"https://github.com/cure53/DOMPurify/releases"
]
},
{
"atOrAbove": "0",
"below": "2.5.0",
"cwe": [
"CWE-79"
],
"severity": "high",
"identifiers": {
"summary": "DOMpurify has a nesting-based mXSS",
"CVE": [
"CVE-2024-47875"
],
"githubID": "GHSA-gx9m-whjm-85jf"
},
"info": [
"https://github.com/advisories/GHSA-gx9m-whjm-85jf",
"https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf",
"https://nvd.nist.gov/vuln/detail/CVE-2024-47875",
"https://github.com/cure53/DOMPurify/commit/0ef5e537a514f904b6aa1d7ad9e749e365d7185f",
"https://github.com/cure53/DOMPurify/commit/6ea80cd8b47640c20f2f230c7920b1f4ce4fdf7a",
"https://github.com/cure53/DOMPurify",
"https://github.com/cure53/DOMPurify/blob/0ef5e537a514f904b6aa1d7ad9e749e365d7185f/test/test-suite.js#L2098"
]
},
{
"atOrAbove": "0",
"below": "2.5.4",
Expand All @@ -4495,6 +4519,30 @@
"https://github.com/cure53/DOMPurify"
]
},
{
"atOrAbove": "3.0.0",
"below": "3.1.3",
"cwe": [
"CWE-79"
],
"severity": "high",
"identifiers": {
"summary": "DOMpurify has a nesting-based mXSS",
"CVE": [
"CVE-2024-47875"
],
"githubID": "GHSA-gx9m-whjm-85jf"
},
"info": [
"https://github.com/advisories/GHSA-gx9m-whjm-85jf",
"https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf",
"https://nvd.nist.gov/vuln/detail/CVE-2024-47875",
"https://github.com/cure53/DOMPurify/commit/0ef5e537a514f904b6aa1d7ad9e749e365d7185f",
"https://github.com/cure53/DOMPurify/commit/6ea80cd8b47640c20f2f230c7920b1f4ce4fdf7a",
"https://github.com/cure53/DOMPurify",
"https://github.com/cure53/DOMPurify/blob/0ef5e537a514f904b6aa1d7ad9e749e365d7185f/test/test-suite.js#L2098"
]
},
{
"atOrAbove": "3.0.0",
"below": "3.1.3",
Expand Down
48 changes: 48 additions & 0 deletions repository/jsrepository-v3.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4568,6 +4568,30 @@
"https://github.com/cure53/DOMPurify/releases"
]
},
{
"atOrAbove": "0",
"below": "2.5.0",
"cwe": [
"CWE-79"
],
"severity": "high",
"identifiers": {
"summary": "DOMpurify has a nesting-based mXSS",
"CVE": [
"CVE-2024-47875"
],
"githubID": "GHSA-gx9m-whjm-85jf"
},
"info": [
"https://github.com/advisories/GHSA-gx9m-whjm-85jf",
"https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf",
"https://nvd.nist.gov/vuln/detail/CVE-2024-47875",
"https://github.com/cure53/DOMPurify/commit/0ef5e537a514f904b6aa1d7ad9e749e365d7185f",
"https://github.com/cure53/DOMPurify/commit/6ea80cd8b47640c20f2f230c7920b1f4ce4fdf7a",
"https://github.com/cure53/DOMPurify",
"https://github.com/cure53/DOMPurify/blob/0ef5e537a514f904b6aa1d7ad9e749e365d7185f/test/test-suite.js#L2098"
]
},
{
"atOrAbove": "0",
"below": "2.5.4",
Expand All @@ -4592,6 +4616,30 @@
"https://github.com/cure53/DOMPurify"
]
},
{
"atOrAbove": "3.0.0",
"below": "3.1.3",
"cwe": [
"CWE-79"
],
"severity": "high",
"identifiers": {
"summary": "DOMpurify has a nesting-based mXSS",
"CVE": [
"CVE-2024-47875"
],
"githubID": "GHSA-gx9m-whjm-85jf"
},
"info": [
"https://github.com/advisories/GHSA-gx9m-whjm-85jf",
"https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf",
"https://nvd.nist.gov/vuln/detail/CVE-2024-47875",
"https://github.com/cure53/DOMPurify/commit/0ef5e537a514f904b6aa1d7ad9e749e365d7185f",
"https://github.com/cure53/DOMPurify/commit/6ea80cd8b47640c20f2f230c7920b1f4ce4fdf7a",
"https://github.com/cure53/DOMPurify",
"https://github.com/cure53/DOMPurify/blob/0ef5e537a514f904b6aa1d7ad9e749e365d7185f/test/test-suite.js#L2098"
]
},
{
"atOrAbove": "3.0.0",
"below": "3.1.3",
Expand Down
48 changes: 48 additions & 0 deletions repository/jsrepository-v4.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4567,6 +4567,30 @@
"https://github.com/cure53/DOMPurify/releases"
]
},
{
"atOrAbove": "0",
"below": "2.5.0",
"cwe": [
"CWE-79"
],
"severity": "high",
"identifiers": {
"summary": "DOMpurify has a nesting-based mXSS",
"CVE": [
"CVE-2024-47875"
],
"githubID": "GHSA-gx9m-whjm-85jf"
},
"info": [
"https://github.com/advisories/GHSA-gx9m-whjm-85jf",
"https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf",
"https://nvd.nist.gov/vuln/detail/CVE-2024-47875",
"https://github.com/cure53/DOMPurify/commit/0ef5e537a514f904b6aa1d7ad9e749e365d7185f",
"https://github.com/cure53/DOMPurify/commit/6ea80cd8b47640c20f2f230c7920b1f4ce4fdf7a",
"https://github.com/cure53/DOMPurify",
"https://github.com/cure53/DOMPurify/blob/0ef5e537a514f904b6aa1d7ad9e749e365d7185f/test/test-suite.js#L2098"
]
},
{
"atOrAbove": "0",
"below": "2.5.4",
Expand All @@ -4591,6 +4615,30 @@
"https://github.com/cure53/DOMPurify"
]
},
{
"atOrAbove": "3.0.0",
"below": "3.1.3",
"cwe": [
"CWE-79"
],
"severity": "high",
"identifiers": {
"summary": "DOMpurify has a nesting-based mXSS",
"CVE": [
"CVE-2024-47875"
],
"githubID": "GHSA-gx9m-whjm-85jf"
},
"info": [
"https://github.com/advisories/GHSA-gx9m-whjm-85jf",
"https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf",
"https://nvd.nist.gov/vuln/detail/CVE-2024-47875",
"https://github.com/cure53/DOMPurify/commit/0ef5e537a514f904b6aa1d7ad9e749e365d7185f",
"https://github.com/cure53/DOMPurify/commit/6ea80cd8b47640c20f2f230c7920b1f4ce4fdf7a",
"https://github.com/cure53/DOMPurify",
"https://github.com/cure53/DOMPurify/blob/0ef5e537a514f904b6aa1d7ad9e749e365d7185f/test/test-suite.js#L2098"
]
},
{
"atOrAbove": "3.0.0",
"below": "3.1.3",
Expand Down
48 changes: 48 additions & 0 deletions repository/jsrepository.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4435,6 +4435,30 @@
"https://github.com/cure53/DOMPurify/releases"
]
},
{
"atOrAbove": "0",
"below": "2.5.0",
"cwe": [
"CWE-79"
],
"severity": "high",
"identifiers": {
"summary": "DOMpurify has a nesting-based mXSS",
"CVE": [
"CVE-2024-47875"
],
"githubID": "GHSA-gx9m-whjm-85jf"
},
"info": [
"https://github.com/advisories/GHSA-gx9m-whjm-85jf",
"https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf",
"https://nvd.nist.gov/vuln/detail/CVE-2024-47875",
"https://github.com/cure53/DOMPurify/commit/0ef5e537a514f904b6aa1d7ad9e749e365d7185f",
"https://github.com/cure53/DOMPurify/commit/6ea80cd8b47640c20f2f230c7920b1f4ce4fdf7a",
"https://github.com/cure53/DOMPurify",
"https://github.com/cure53/DOMPurify/blob/0ef5e537a514f904b6aa1d7ad9e749e365d7185f/test/test-suite.js#L2098"
]
},
{
"atOrAbove": "0",
"below": "2.5.4",
Expand All @@ -4459,6 +4483,30 @@
"https://github.com/cure53/DOMPurify"
]
},
{
"atOrAbove": "3.0.0",
"below": "3.1.3",
"cwe": [
"CWE-79"
],
"severity": "high",
"identifiers": {
"summary": "DOMpurify has a nesting-based mXSS",
"CVE": [
"CVE-2024-47875"
],
"githubID": "GHSA-gx9m-whjm-85jf"
},
"info": [
"https://github.com/advisories/GHSA-gx9m-whjm-85jf",
"https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf",
"https://nvd.nist.gov/vuln/detail/CVE-2024-47875",
"https://github.com/cure53/DOMPurify/commit/0ef5e537a514f904b6aa1d7ad9e749e365d7185f",
"https://github.com/cure53/DOMPurify/commit/6ea80cd8b47640c20f2f230c7920b1f4ce4fdf7a",
"https://github.com/cure53/DOMPurify",
"https://github.com/cure53/DOMPurify/blob/0ef5e537a514f904b6aa1d7ad9e749e365d7185f/test/test-suite.js#L2098"
]
},
{
"atOrAbove": "3.0.0",
"below": "3.1.3",
Expand Down

0 comments on commit f419da0

Please sign in to comment.