org.webjars.npm:dompurify@2.2.0 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the org.webjars.npm:dompurify package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Template Injection org.webjars.npm:dompurify is a DOM-only XSS sanitizer for HTML, MathML and SVG. Affected versions of this package are vulnerable to Template Injection in `purify.js`, due to inconsistencies in the parsing of XML and HTML tags. Executable code can be injected in HTML inside XML `CDATA` blocks. How to fix Template Injection? Upgrade `org.webjars.npm:dompurify` to version 2.5.0, 3.1.0 or higher.	[,2.5.0) [3.0.1,3.1.0)
M Cross-site Scripting (XSS) org.webjars.npm:dompurify is a DOM-only XSS sanitizer for HTML, MathML and SVG. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). This is due to a bypass of a previous XSS vulnerability. How to fix Cross-site Scripting (XSS)? Upgrade `org.webjars.npm:dompurify` to version 2.2.6 or higher.	[,2.2.6)
M Cross-site Scripting (XSS) org.webjars.npm:dompurify is a DOM-only XSS sanitizer for HTML, MathML and SVG. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when converting from SVG namespace. How to fix Cross-site Scripting (XSS)? Upgrade `org.webjars.npm:dompurify` to version 2.2.6 or higher.	[0,2.2.6)