UpHeron
All vulnerabilities

npm

GHSA-c6gr-qvv4-5v3f

DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml

Severity
Low
Published
22 Oct 2026
Last changed
22 Oct 2026
Added to UpHeron
23 Oct 2026
Fixed in
3.4.17
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
dompurifynpm · osv:npm:dompurify
  • Every version before 3.4.17

References