fix(deps): update dependency dompurify to v3 [security] by renovate[bot] · Pull Request #597 · CougarCS/CougarCS-Client

renovate · 2024-09-16T21:51:43Z

This PR contains the following updates:

Package	Change	Age	Confidence
dompurify	`2.3.8` → `3.2.4`

DOMPurify allows tampering by prototype pollution

CVE-2024-45801 / GHSA-mmhx-hmjr-r674

More information

Details

It has been discovered that malicious HTML using special nesting techniques can bypass the depth checking added to DOMPurify in recent releases. It was also possible to use Prototype Pollution to weaken the depth check.

This renders dompurify unable to avoid XSS attack.

Fixed by cure53/DOMPurify@1e52026 (3.x branch) and cure53/DOMPurify@26e1d69 (2.x branch).

Severity

CVSS Score: 8.3 / 10 (High)
Vector String: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

DOMpurify has a nesting-based mXSS

CVE-2024-47875 / GHSA-gx9m-whjm-85jf

More information

Details

DOMpurify was vulnerable to nesting-based mXSS

fixed by 0ef5e537 (2.x) and
merge 943

Backporter should be aware of GHSA-mmhx-hmjr-r674 (CVE-2024-45801) when cherry-picking

POC is avaible under test

Severity

CVSS Score: 7.9 / 10 (High)
Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:H

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

DOMPurify vulnerable to tampering by prototype polution

CVE-2024-48910 / GHSA-p3vf-v8qc-cwcr

More information

Details

dompurify was vulnerable to prototype pollution

Fixed by cure53/DOMPurify@d1dd037

Severity

CVSS Score: 9.3 / 10 (Critical)
Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

DOMPurify allows Cross-site Scripting (XSS)

CVE-2025-26791 / GHSA-vhxf-7vqr-mrjg

More information

Details

DOMPurify before 3.2.4 has an incorrect template literal regular expression when SAFE_FOR_TEMPLATES is set to true, sometimes leading to mutation cross-site scripting (mXSS).

Severity

CVSS Score: 4.5 / 10 (Medium)
Vector String: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Release Notes

cure53/DOMPurify (dompurify)

`v3.2.4`: DOMPurify 3.2.4

Compare Source

Fixed a conditional and config dependent mXSS-style bypass reported by @nsysean
Added a new feature to allow specific hook removal, thanks @davecardwell
Added purify.js and purify.min.js to exports, thanks @Aetherinox
Added better logic in case no window object is president, thanks @yehuya
Updated some dependencies called out by dependabot
Updated license files etc to show the correct year

`v3.2.3`: DOMPurify 3.2.3

Compare Source

Fixed two conditional sanitizer bypasses discovered by @parrot409 and @Slonser
Updated the attribute clobbering checks to prevent future bypasses, thanks @parrot409

`v3.2.2`: DOMPurify 3.2.2

Compare Source

Fixed a possible bypass in case a rather specific config for custom elements is set, thanks @yaniv-git
Fixed several minor issues with the type definitions, thanks again @reduckted
Fixed a minor issue with the types reference for trusted types, thanks @reduckted
Fixed a minor problem with the template detection regex on some systems, thanks @svdb99

`v3.2.1`: DOMPurify 3.2.1

Compare Source

Fixed several minor issues with the type definitions, thanks @reduckted @ghiscoding @asamuzaK @MiniDigger
Fixed an issue with non-minified dist files and order of imports, thanks @reduckted

`v3.2.0`: DOMPurify 3.2.0

Compare Source

Added type declarations, thanks @reduckted , @philmayfield, @aloisklink, @ssi02014 and others
Fixed a minor issue with the handling of hooks, thanks @kevin-mizu

`v3.1.7`: DOMPurify 3.1.7

Compare Source

Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @masatokinugawa
Fixed several smaller typos in documentation and test & build files, thanks @christianhg
Added better support for Angular compiler, thanks @jeroen1602
Added several new attributes to HTML and SVG allow-list, thanks @Gigabyte5671 and @Rotzbua
Removed the foreignObject element from the list of HTML entry-points, thanks @masatokinugawa
Bumped several dependencies to be more up to date

`v3.1.6`: DOMPurify 3.1.6

Compare Source

Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @kevin-mizu
Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks @realansgar
Fixed a minor problem with the bower file pointing to the wrong dist path
Fixed several minor typos in docs, comments and comment blocks, thanks @Rotzbua
Updated several development dependencies

`v3.1.5`: DOMPurify 3.1.5

Compare Source

Fixed a minor issue with the dist paths in bower.js, thanks @HakumenNC
Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @kakao-bishop-cho

`v3.1.4`: DOMPurify 3.1.4

Compare Source

Fixed an issue with the recently implemented isNaN checks, thanks @tulach
Added several new popover attributes to allow-list, thanks @Gigabyte5671
Fixed the tests and adjusted the test runner to cover all branches

`v3.1.3`: DOMPurify 3.1.3

Compare Source

Fixed several mXSS variations found by and thanks to @kevin-mizu & @Ry0taK
Added better configurability for comment scrubbing default behavior
Added better hardening against Prototype Pollution attacks, thanks @kevin-mizu
Added better handling and readability of the nodeType property, thanks @ssi02014
Fixed some smaller issues in README and other documentation

`v3.1.2`: DOMPurify 3.1.2

Compare Source

Addressed and fixed a mXSS variation found by @kevin-mizu
Addressed and fixed a mXSS variation found by Adam Kues of Assetnote
Updated tests for older Safari and Chrome versions

`v3.1.1`: DOMPurify 3.1.1

Compare Source

Fixed an mXSS sanitiser bypass reported by @icesfont
Added new code to track element nesting depth
Added new code to enforce a maximum nesting depth of 255
Added coverage tests and necessary clobbering protections

Note that this is a security release and should be upgraded to immediately. Please also note that further releases may follow as the underlying vulnerability is apparently new and further variations may be discovered.

`v3.1.0`: DOMPurify 3.1.0

Compare Source

Added new setting SAFE_FOR_XML to enable better control over comment scrubbing
Updated README to warn about happy-dom not being safe for use with DOMPurify yet
Updated the LICENSE file to show the accurate year number
Updated several build and test dependencies

`v3.0.11`: DOMPurify 3.0.11

Compare Source

Fixed another conditional bypass caused by Processing Instructions, thanks @Ry0taK
Fixed the regex for HTML Custom Element detection, thanks @AlekseySolovey3T

`v3.0.10`: DOMPurify 3.0.10

Compare Source

Fixed two possible bypasses when sanitizing an XML document and later using it in HTML, thanks @Slonser
Bumped up some build and test dependencies

`v3.0.9`: DOMPurify 3.0.9

Compare Source

Fixed a problem with proper detection of Custom Elements, thanks @kevin-mizu
Refactored the hasOwnProperty logic, thanks @ssi02014
Removed a superfluous console.warn making HappyDom happier, thanks @HugoPoi
Modernized some of the demo hooks for better looks, thanks @Steb95

`v3.0.8`: DOMPurify 3.0.8

Compare Source

Fixed errors caused by conditional exports, thanks @ssi02014
Fixed a type error when working with custom element config, thanks @cpmotion

`v3.0.7`: DOMPurify 3.0.7

Compare Source

Added better protection against CSPP attacks, thanks @kevin-mizu
Updated browser versions for automated tests
Updated Node versions for automated tests
Refactored code base, thanks @ssi02014
Refactored build system & deployment, thanks @ssi02014

`v3.0.6`: DOMPurify 3.0.6

Compare Source

Refactored the core code-base and several utilities, thanks @ssi02014
Updated and fixed several sections of the README, thanks @ssi02014
Updated several outdated build and test dependencies

`v3.0.5`: DOMPurify 3.0.5

Compare Source

Fixed a licensing issue spotted and reported by @george-thomas-hill
Updated several build and test dependencies

`v3.0.4`: DOMPurify 3.0.4

Compare Source

Fixed a bypass in jsdom 22 in case the noframes element is permitted, thanks @leeN
Fixed a typo with shadowrootmod which should be shadowrootmode, thanks @masatokinugawa

`v3.0.3`: DOMPurify 3.0.3

Compare Source

Added new TRUSTED_TYPES_POLICY configuration option, thanks @dejang
Added feDropShadow to the SVG filter allow-list, thanks @SelfMadeSystem

`v3.0.2`: DOMPurify 3.0.2

Compare Source

Fixed an issue with ALLOWED_URI_REGEXP not being reset, thanks @mukilane
Added mprescripts tag to allowed MathML elements, thanks @duyhai94
Added SMS URI scheme to allowed URI schemes, tanks @Kiwka
Updated supported browser versions for nicer code and smaller size, thanks @buzinas

`v3.0.1`: DOMPurify 3.0.1

Compare Source

Fixed a problem with improper reset of custom HTML options, thanks @ammaraskar

`v3.0.0`: DOMPurify 3.0.0

Compare Source

Removed all code that is for MSIE-only
Removed all tests that are for MSIE-only
Modified documentation to reflect new state of MSIE support
Added support for ALLOW_SELF_CLOSE_IN_ATTR flag, thanks @edg2s @AndreVirtimo
Added better support for shadowrootmode, thanks @mfreed7

NOTE Please use the 2.4.4 release if you still need MSIE support, 3.0.0 comes without the MSIE overhead

`v2.5.9`: DOMPurify 2.5.9

Compare Source

Fixed a possible bypass caused by jsdom's faulty raw-text tag parsing

`v2.5.8`: DOMPurify 2.5.8

Compare Source

Fixed two conditional sanitizer bypasses discovered by @parrot409 and @Slonser
Updated the attribute clobbering checks to prevent future bypasses, thanks @parrot409

`v2.5.7`: DOMPurify 2.5.7

Compare Source

Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @masatokinugawa
Removed the foreignObject element from the list of HTML entry-points, thanks @masatokinugawa

`v2.5.6`: DOMPurify 2.5.6

Compare Source

Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @kevin-mizu
Fixed a minor problem with the bower file pointing to the wrong dist path
Updated several development dependencies

`v2.5.5`: DOMPurify 2.5.5

Compare Source

Fixed a minor issue with the dist paths in bower.js, thanks @HakumenNC
Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @kakao-bishop-cho

`v2.5.4`: DOMPurify 2.5.4

Compare Source

Fixed a bug with latest isNaN checks affecting MSIE, thanks @tulach
Fixed the tests for MSIE and fixed related test-runner

`v2.5.3`: DOMPurify 2.5.3

Compare Source

Fixed several mXSS variations found by and thanks to @kevin-mizu & @Ry0taK
Added better configurability for comment scrubbing default behavior
Added better hardening against Prototype Pollution attacks, thanks @kevin-mizu
Fixed some smaller issues in README and other documentation

`v2.5.2`: DOMPurify 2.5.2

Compare Source

Addressed and fixed a mXSS variation found by @kevin-mizu
Addressed and fixed a mXSS variation found by Adam Kues of Assetnote
Updated tests for older Safari and Chrome versions

`v2.5.1`: DOMPurify 2.5.1

Compare Source

Fixed an mXSS sanitizer bypass reported by @icesfont
Added new code to track element nesting depth
Added new code to enforce a maximum nesting depth of 255
Added coverage tests and necessary clobbering protections

Note that this is a security release and should be upgraded to immediately. Please also note that further releases may follow as the underlying vulnerability is apparently new and further variations may be discovered.

`v2.5.0`: DOMPurify 2.5.0

Compare Source

Added new setting SAFE_FOR_XML to enable better control over comment scrubbing
Updated the LICENSE file to show the accurate year number
Updated several build and test dependencies

`v2.4.9`: DOMPurify 2.4.9

Compare Source

Fixed another conditional bypass caused by Processing Instructions, thanks @Ry0taK
Fixed the regex for HTML Custom Element detection, thanks @AlekseySolovey3T

`v2.4.8`: DOMPurify 2.4.8

Compare Source

Fixed two possible bypasses when sanitizing an XML document and later using it in HTML, thanks @Slonser

`v2.4.7`: DOMPurify 2.4.7

Compare Source

Fixed a licensing issue spotted and reported by @george-thomas-hill

`v2.4.6`: DOMPurify 2.4.6

Compare Source

Fixed a bypass in jsdom 22 in case the noframes element is permitted, thanks @leeN

`v2.4.5`: DOMPurify 2.4.5

Compare Source

Fixed a problem with improper reset of custom HTML options, thanks @ammaraskar

`v2.4.4`: DOMPurify 2.4.4

Compare Source

Added support for ALLOW_SELF_CLOSE_IN_ATTR flag, thanks @edg2s @AndreVirtimo
Added better support for shadowrootmode, thanks @mfreed7

`v2.4.3`: DOMPurify 2.4.3

Compare Source

Final release that is compatible with MSIE10 & MSIE 11

`v2.4.2`: DOMPurify 2.4.2

Compare Source

Fixed a Trusted Types sink violation with empty input and NAMESPACE , thanks @tosmolka
Fixed a Prototype Pollution issue discovered and reported by @kevin-mizu

`v2.4.1`: DOMPurify 2.4.1

Compare Source

Added new config option ALLOWED_NAMESPACES for better XML handling, thanks @kevin-deyoungster @tosmolka
Added better detection of template literals when SAFE_FOR_TEMPLATES is true
Fixed an exception caused by DOM clobbering, thanks @masatokinugawa
Bumped some dependencies, thanks @marcpenya-tf

`v2.4.0`: DOMPurify 2.4.0

Compare Source

Removed bundled types again as they caused too much trouble

`v2.3.12`: DOMPurify 2.3.12

Compare Source

Fixed an issue in 2.3.11 causing errors w. TypeScript, see #712, thanks @Mirco469, @brentkeller, @aryanisml

`v2.3.11`: DOMPurify 2.3.11

Compare Source

Added generated type definitions for better compatibility
Added SANITIZE_NAMED_PROPS config option, thanks @SoheilKhodayari
Updated README and config documentation, thanks @0xedward
Updated test suite with newer Node versions

`v2.3.10`: DOMPurify 2.3.10

Compare Source

Added support for sanitization of attributes requiring Trusted Types, thanks @tosmolka

`v2.3.9`: DOMPurify 2.3.9

Compare Source

Made TAG and ATTR config options case-sensitive when parsing XHTML, thanks @tosmolka
Bumped some dependencies, thanks @is2ei
Included github-actions in the dependabot config, thanks @nathannaveen

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2024-09-16T21:51:44Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: @craco/craco@6.4.3
npm error Found: react-scripts@5.0.1
npm error node_modules/react-scripts
npm error   react-scripts@"5.0.1" from the root project
npm error   peer react-scripts@"^5" from craco-swc@0.5.1
npm error   node_modules/craco-swc
npm error     dev craco-swc@"0.5.1" from the root project
npm error
npm error Could not resolve dependency:
npm error peer react-scripts@"^4.0.0" from @craco/craco@6.4.3
npm error node_modules/@craco/craco
npm error   dev @craco/craco@"6.4.3" from the root project
npm error   peer @craco/craco@"^6 || ^7" from craco-swc@0.5.1
npm error   node_modules/craco-swc
npm error     dev craco-swc@"0.5.1" from the root project
npm error
npm error Conflicting peer dependency: react-scripts@4.0.3
npm error node_modules/react-scripts
npm error   peer react-scripts@"^4.0.0" from @craco/craco@6.4.3
npm error   node_modules/@craco/craco
npm error     dev @craco/craco@"6.4.3" from the root project
npm error     peer @craco/craco@"^6 || ^7" from craco-swc@0.5.1
npm error     node_modules/craco-swc
npm error       dev craco-swc@"0.5.1" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-07-12T12_40_12_972Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-07-12T12_40_12_972Z-debug-0.log

netlify · 2024-09-16T21:52:04Z

❌ Deploy Preview for practical-hodgkin-4543e2 failed.

Name	Link
🔨 Latest commit	`be43aa6`
🔍 Latest deploy log	https://app.netlify.com/sites/practical-hodgkin-4543e2/deploys/67afc8b5f6198c0008c95e06

sonarqubecloud · 2024-09-16T21:52:22Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

sonarqubecloud · 2025-02-14T22:51:03Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

netlify · 2026-03-28T04:56:42Z

❌ Deploy Preview for practical-hodgkin-4543e2 failed.

Name	Link
🔨 Latest commit	`c11f2b6`
🔍 Latest deploy log	https://app.netlify.com/projects/practical-hodgkin-4543e2/deploys/69eff57b03b4c100083e8e29

sonarqubecloud · 2026-04-27T23:48:06Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

renovate Bot changed the title ~~fix(deps): update dependency dompurify to v2.5.4 [security]~~ fix(deps): update dependency dompurify to v2.5.4 [security] - autoclosed Dec 8, 2024

renovate Bot closed this Dec 8, 2024

renovate Bot deleted the renovate/npm-dompurify-vulnerability branch December 8, 2024 18:33

renovate Bot changed the title ~~fix(deps): update dependency dompurify to v2.5.4 [security] - autoclosed~~ fix(deps): update dependency dompurify to v2.5.4 [security] Dec 8, 2024

renovate Bot reopened this Dec 8, 2024

renovate Bot force-pushed the renovate/npm-dompurify-vulnerability branch from ef138da to be43aa6 Compare February 14, 2025 22:50

renovate Bot changed the title ~~fix(deps): update dependency dompurify to v2.5.4 [security]~~ fix(deps): update dependency dompurify to v3 [security] Feb 14, 2025

renovate Bot changed the title ~~fix(deps): update dependency dompurify to v3 [security]~~ fix(deps): update dependency dompurify to v3 [security] - autoclosed Mar 27, 2026

renovate Bot closed this Mar 27, 2026

renovate Bot changed the title ~~fix(deps): update dependency dompurify to v3 [security] - autoclosed~~ fix(deps): update dependency dompurify to v3 [security] Mar 28, 2026

renovate Bot reopened this Mar 28, 2026

renovate Bot force-pushed the renovate/npm-dompurify-vulnerability branch from be43aa6 to b2f5607 Compare March 28, 2026 04:56

renovate Bot force-pushed the renovate/npm-dompurify-vulnerability branch from b2f5607 to 1ef59c2 Compare March 30, 2026 18:30

renovate Bot changed the title ~~fix(deps): update dependency dompurify to v3 [security]~~ fix(deps): update dependency dompurify to v3 [security] - autoclosed Apr 27, 2026

renovate Bot closed this Apr 27, 2026

fix(deps): update dependency dompurify to v3 [security]

c11f2b6

renovate Bot changed the title ~~fix(deps): update dependency dompurify to v3 [security] - autoclosed~~ fix(deps): update dependency dompurify to v3 [security] Apr 27, 2026

renovate Bot reopened this Apr 27, 2026

renovate Bot force-pushed the renovate/npm-dompurify-vulnerability branch 2 times, most recently from 1ef59c2 to c11f2b6 Compare April 27, 2026 23:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update dependency dompurify to v3 [security]#597

fix(deps): update dependency dompurify to v3 [security]#597
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/npm-dompurify-vulnerability

renovate Bot commented Sep 16, 2024 •

edited

Loading

Uh oh!

renovate Bot commented Sep 16, 2024 •

edited

Loading

Uh oh!

netlify Bot commented Sep 16, 2024 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Sep 16, 2024

Uh oh!

sonarqubecloud Bot commented Feb 14, 2025

Uh oh!

netlify Bot commented Mar 28, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Apr 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Sep 16, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

DOMPurify allows tampering by prototype pollution

Details

Severity

References

DOMpurify has a nesting-based mXSS

Details

Severity

References

DOMPurify vulnerable to tampering by prototype polution

Details

Severity

References

DOMPurify allows Cross-site Scripting (XSS)

Details

Severity

References

Release Notes

v3.2.4: DOMPurify 3.2.4

v3.2.3: DOMPurify 3.2.3

v3.2.2: DOMPurify 3.2.2

v3.2.1: DOMPurify 3.2.1

v3.2.0: DOMPurify 3.2.0

v3.1.7: DOMPurify 3.1.7

v3.1.6: DOMPurify 3.1.6

v3.1.5: DOMPurify 3.1.5

v3.1.4: DOMPurify 3.1.4

v3.1.3: DOMPurify 3.1.3

v3.1.2: DOMPurify 3.1.2

v3.1.1: DOMPurify 3.1.1

v3.1.0: DOMPurify 3.1.0

v3.0.11: DOMPurify 3.0.11

v3.0.10: DOMPurify 3.0.10

v3.0.9: DOMPurify 3.0.9

v3.0.8: DOMPurify 3.0.8

v3.0.7: DOMPurify 3.0.7

v3.0.6: DOMPurify 3.0.6

v3.0.5: DOMPurify 3.0.5

v3.0.4: DOMPurify 3.0.4

v3.0.3: DOMPurify 3.0.3

v3.0.2: DOMPurify 3.0.2

v3.0.1: DOMPurify 3.0.1

v3.0.0: DOMPurify 3.0.0

v2.5.9: DOMPurify 2.5.9

v2.5.8: DOMPurify 2.5.8

v2.5.7: DOMPurify 2.5.7

v2.5.6: DOMPurify 2.5.6

v2.5.5: DOMPurify 2.5.5

v2.5.4: DOMPurify 2.5.4

v2.5.3: DOMPurify 2.5.3

v2.5.2: DOMPurify 2.5.2

v2.5.1: DOMPurify 2.5.1

v2.5.0: DOMPurify 2.5.0

v2.4.9: DOMPurify 2.4.9

v2.4.8: DOMPurify 2.4.8

v2.4.7: DOMPurify 2.4.7

v2.4.6: DOMPurify 2.4.6

v2.4.5: DOMPurify 2.4.5

v2.4.4: DOMPurify 2.4.4

v2.4.3: DOMPurify 2.4.3

v2.4.2: DOMPurify 2.4.2

v2.4.1: DOMPurify 2.4.1

v2.4.0: DOMPurify 2.4.0

v2.3.12: DOMPurify 2.3.12

v2.3.11: DOMPurify 2.3.11

v2.3.10: DOMPurify 2.3.10

v2.3.9: DOMPurify 2.3.9

Configuration

Uh oh!

renovate Bot commented Sep 16, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: package-lock.json

Uh oh!

netlify Bot commented Sep 16, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ Deploy Preview for practical-hodgkin-4543e2 failed.

renovate Bot commented Sep 16, 2024 •

edited

Loading

`v3.2.4`: DOMPurify 3.2.4

`v3.2.3`: DOMPurify 3.2.3

`v3.2.2`: DOMPurify 3.2.2

`v3.2.1`: DOMPurify 3.2.1

`v3.2.0`: DOMPurify 3.2.0

`v3.1.7`: DOMPurify 3.1.7

`v3.1.6`: DOMPurify 3.1.6

`v3.1.5`: DOMPurify 3.1.5

`v3.1.4`: DOMPurify 3.1.4

`v3.1.3`: DOMPurify 3.1.3

`v3.1.2`: DOMPurify 3.1.2

`v3.1.1`: DOMPurify 3.1.1

`v3.1.0`: DOMPurify 3.1.0

`v3.0.11`: DOMPurify 3.0.11

`v3.0.10`: DOMPurify 3.0.10

`v3.0.9`: DOMPurify 3.0.9

`v3.0.8`: DOMPurify 3.0.8

`v3.0.7`: DOMPurify 3.0.7

`v3.0.6`: DOMPurify 3.0.6

`v3.0.5`: DOMPurify 3.0.5

`v3.0.4`: DOMPurify 3.0.4

`v3.0.3`: DOMPurify 3.0.3

`v3.0.2`: DOMPurify 3.0.2

`v3.0.1`: DOMPurify 3.0.1

`v3.0.0`: DOMPurify 3.0.0

`v2.5.9`: DOMPurify 2.5.9

`v2.5.8`: DOMPurify 2.5.8

`v2.5.7`: DOMPurify 2.5.7

`v2.5.6`: DOMPurify 2.5.6

`v2.5.5`: DOMPurify 2.5.5

`v2.5.4`: DOMPurify 2.5.4

`v2.5.3`: DOMPurify 2.5.3

`v2.5.2`: DOMPurify 2.5.2

`v2.5.1`: DOMPurify 2.5.1

`v2.5.0`: DOMPurify 2.5.0

`v2.4.9`: DOMPurify 2.4.9

`v2.4.8`: DOMPurify 2.4.8

`v2.4.7`: DOMPurify 2.4.7

`v2.4.6`: DOMPurify 2.4.6

`v2.4.5`: DOMPurify 2.4.5

`v2.4.4`: DOMPurify 2.4.4

`v2.4.3`: DOMPurify 2.4.3

`v2.4.2`: DOMPurify 2.4.2

`v2.4.1`: DOMPurify 2.4.1

`v2.4.0`: DOMPurify 2.4.0

`v2.3.12`: DOMPurify 2.3.12

`v2.3.11`: DOMPurify 2.3.11

`v2.3.10`: DOMPurify 2.3.10

`v2.3.9`: DOMPurify 2.3.9

renovate Bot commented Sep 16, 2024 •

edited

Loading

netlify Bot commented Sep 16, 2024 •

edited

Loading

netlify Bot commented Mar 28, 2026 •

edited

Loading