Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-25155

Fixed upstream EPSS <1%

DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attribute.

Published 2023-10-31 · CVE record · OSV

Products: cure53 dompurify

Fixed upstream

EcosystemPackageFixed in
npmdompurify1.0.11

Distro releases

ReleasePackageFixed in
Ubuntu 16.04 LTSdompurify.jsno fix
Ubuntu 18.04 LTSdompurify.jsno fix