composer

rhukster/dom-sanitizer

Security advisories for rhukster/dom-sanitizer, newest first. 2 known, all fixed. If you’re on 1.0.10 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

1.0.20

Advisories

2 · 0 unfixed

Last advisory

10 Apr 2026

Safe from

1.0.10

2 advisories · newest first

MODERATE4.7 10 Apr 2026

rhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directives

GHSA-93vf-569f-22cq · CVE-2026-40301

Affected

< 1.0.10

Fixed in

1.0.10

Published

10 Apr 2026

MODERATE6.1 23 Nov 2023

Cross-site Scripting in DOMSanitizer

GHSA-2ghm-r75j-pjx2 · CVE-2023-49146

Affected

< 1.0.7

Fixed in

1.0.7

Published

23 Nov 2023

/advisories/composer/rhukster/dom-sanitizer/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →