[Snyk] Upgrade dompurify from 2.0.17 to 2.4.7 #2

chr0m1ng · 2024-02-01T14:30:23Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade dompurify from 2.0.17 to 2.4.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 33 versions ahead of your current version.
The recommended version was released 7 months ago, on 2023-07-11.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Cross-site Scripting (XSS) SNYK-JS-DOMPURIFY-1035544	539/1000 Why? Has a fix available, CVSS 6.5	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-DOMPURIFY-2863266	539/1000 Why? Has a fix available, CVSS 6.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: dompurify

2.4.7 - 2023-07-11
- Fixed a licensing issue spotted and reported by @ george-thomas-hill
2.4.6 - 2023-07-10
- Fixed a bypass in jsdom 22 in case the noframes element is permitted, thanks @ leeN
2.4.5 - 2023-03-01
2.4.4 - 2023-02-13
2.4.3 - 2023-01-06
2.4.2 - 2023-01-05
2.4.1 - 2022-11-10
2.4.0 - 2022-08-24
2.3.12 - 2022-08-23
2.3.11 - 2022-08-23
2.3.10 - 2022-07-18
2.3.9 - 2022-07-11
2.3.8 - 2022-05-13
2.3.7 - 2022-05-11
2.3.6 - 2022-02-16
2.3.5 - 2022-01-26
2.3.4 - 2021-12-07
2.3.3 - 2021-09-20
2.3.2 - 2021-09-15
2.3.1 - 2021-08-13
2.3.0 - 2021-07-06
2.2.9 - 2021-06-01
2.2.8 - 2021-04-28
2.2.7 - 2021-03-12
2.2.6 - 2020-12-18
2.2.5 - 2020-12-18
2.2.4 - 2020-12-15
2.2.3 - 2020-12-07
2.2.2 - 2020-11-02
2.2.1 - 2020-11-02
2.2.0 - 2020-10-21
2.1.1 - 2020-09-25
2.1.0 - 2020-09-23
2.0.17 - 2020-09-20

from dompurify GitHub release notes

Commit messages

Package name: dompurify

ef731c0 chore: Preparing 2.4.7. release
5b7dff9 chore: Preparing 2.4.6 release
a01c083 Fix: addressed a bypass on jsdom 22 when noframes tag is allowed
f464d95 chore: preparing 2.4.5 release
fa4e8ee chore: preparing 2.4.4 release
f5c25ac see Migration problem getredash/redash#767
08e9fab test: Added 2.x tag to 2.x branch actions
5f766bc See Cannot list data sources getredash/redash#761
90326ef Merge pull request Docs: how to setup SSL using Let's Encrypt SSL certs getredash/redash#750 from cure53/dependabot/npm_and_yarn/json5-1.0.2
fade506 chore: Prepare 2.4.3, final feature release compatible w. MSIE10/11
3afe389 build(deps): bump json5 from 1.0.1 to 1.0.2
f1e180f fix: merged from latest main
7707778 Update README.md
5267b04 chore: Preparing 2.4.2 release
d1dd037 fix: Fixed a prototype pollution bug reported by @ kevin_mizu
24d2a7f Merge pull request Feature Request: Hide Header on Dashboard getredash/redash#748 from tosmolka/tosmolka/747
7de86a0 Fix formatting
191cc00 Fix Trusted Types Sink violation with empty input and NAMESPACE
4945074 Merge pull request Cannot create user using cli getredash/redash#745 from cure53/dependabot/npm_and_yarn/qs-and-body-parser-6.11.0
7e9fcd9 build(deps): bump qs and body-parser
2734b2d Merge pull request Fix: user created without groups (+2 more) getredash/redash#737 from cure53/dependabot/npm_and_yarn/engine.io-and-socket.io-6.2.1
f3b68d9 build(deps): bump engine.io and socket.io
9a751e4 Merge pull request Fix #730: migration failing when no Google Apps domain set getredash/redash#732 from Pomierski/patch-1
2c03b6c fix