Approved changes feed: RSS · Atom

cpe:2.3:a:getgrav:dom-sanitizer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGetgrav (a335dd59-994b-520f-884a-04ce57f966e0)
ProductDom Sanitizer (c955555f-b7a2-59e7-a7e8-8c98ad8741be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/rhukster/dom-sanitizer purl2cpe 2026-06-01 10:15:21.169571
pkg:github/rhukster/dom-sanitizer purl2cpe 2026-06-01 10:15:21.169573

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-49146 vulnerable 2026-06-08 06:14:28.623340 Details available
DOMSanitizer (aka dom-sanitizer) before 1.0.7 allows XSS via an SVG document because of mishandling of comments and greedy regular expressions.
Published: 2023-11-22T00:00:00.000Z
Updated: 2024-08-02T21:46:29.180Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.