Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-16728

Fixed in a distro release EPSS 1%

DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS (mXSS) for an SVG element or a MATH element, as demonstrated by Chrome and Safari.

Published 2019-09-24 · CVE record · OSV

Products: cure53 dompurify, debian_linux

Fixed upstream

EcosystemPackageFixed in
npmdompurify2.0.3

Distro releases

ReleasePackageFixed in
Debian 9dompurify.js0.8.2~dfsg1-1+deb9u1
Ubuntu 18.04 LTSdompurify.jsno fix