Patches

Debian Patches

Status for node-dompurify/2.4.1+dfsg+~2.4.0-2+deb12u1

Patch	Description	Author	Forwarded	Bugs	Origin	Last update
CVE-2024-47875.patch	fix for CVE-2024-47875 Updated 2.x branch with relevant fixes for nesting-based mXSS	Mario Heiderich <mario@cure53.de>	not-needed	debian upstream	upstream, https://github.com/cure53/DOMPurify/commit/0ef5e537	2024-10-12
CVE-2024-45801.patch	fix prototype pollution Regression introduced into 2.4.1+dfsg+~2.4.0-2	Mario Heiderich <mario@cure53.de>	not-needed	upstream	upstream, https://github.com/cure53/DOMPurify/commit/26e1d69c	2024-10-30
CVE-2024-48910.patch	fix prototype pollution	Mario Heiderich <mario@cure53.de>	not-needed	upstream	upstream, https://github.com/cure53/DOMPurify/commit/d1dd0374	2024-11-02

All known versions for source package 'node-dompurify'

• 3.2.5+dfsg-1 (experimental)
• 3.1.7+dfsg+~3.0.5-2 (forky, trixie, sid)
• 2.4.1+dfsg+~2.4.0-2+deb12u1 (bookworm)
• 2.4.1+dfsg+~2.4.0-2 (bookworm-security)

Links

• Package Tracker for 'node-dompurify'
• Debian Maintainer Dashboard for 'node-dompurify'
• Browse sources for 'node-dompurify/2.4.1+dfsg+~2.4.0-2+deb12u1' on sources.debian.org
• DEP3: Patch Tagging Guidelines