DOMPurify — Vulnerabilities & Security Advisories 29

This page catalogs known weaknesses associated with DOMPurify, a popular DOM-only XSS sanitizer. It serves as a centralized resource for tracking security incidents specific to this JavaScript library developed by Cure53. The collection includes a wide range of vulnerability types such as stored cross-site scripting, prototype pollution, and insufficient input sanitization flaws. These entries span from the initial release of the library through recent updates in the current year, ensuring a comprehensive historical view of security issues. By aggregating data from various sources, this page captures both vendor-published advisories and community-reported bugs that may not have received immediate formal certification. Visitors can use this resource to track DOMPurify vendor advisories and understand the evolution of specific weakness classes within the context of DOM manipulation libraries. Users can also look up the product's vulnerability history to assess risk exposure over time or compare specific flaw types against similar tools in the ecosystem. This information helps developers make informed decisions about library upgrades and mitigation strategies. The data is organized to facilitate quick reference for security auditors, open-source maintainers, and application developers who rely on DOMPurify for client-side security. By providing a consolidated view of these issues, the page supports better security hygiene and proactive vulnerability management practices within modern web development workflows.