dompurify

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It runs as JavaScript and works in all modern browsers, as well as in Node.js (via jsdom). DOMPurify is written by security people who have vast background in web a

Latest 3.4.17

NPM(MPL-2.0 OR Apache-2.0)

91%

Total Score

healthy

Frequent releases and active maintenance support this package, with contribution concentrated in one maintainer.

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

No build attestation or trusted-publisher provenance is reported, leaving publication origin less independently verifiable despite the package's otherwise strong project evidence.

Lifecycle scripts

A prepare install-time script is present, which adds some execution surface during installation, although no additional harmful behavior is shown here.

Project backing

The repository is owned by the user account cure53 rather than an organization, so the concentrated contribution pattern is not offset by explicit organization backing.

Repo bus factor

Five contributors were active, but the top contributor made about 81% of recent commits, creating meaningful continuity risk.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-864217 dompurify is vulnerable to Cross-Site Scripting (XSS) in versions 0.0.1 - 3.4.16.	0.0.1 - 3.4.16	Low
AIKIDO-2026-760928 dompurify is vulnerable to Cross-Site Scripting (XSS) in versions 3.4.4 - 3.4.16.	3.4.4 - 3.4.16	Low
AIKIDO-2026-580831 dompurify is vulnerable to Cross-Site Scripting (XSS) in versions 0.0.1 - 3.4.16.	0.0.1 - 3.4.16	Low
AIKIDO-2026-211698 dompurify is vulnerable to Cross-Site Scripting (XSS) in versions 0.0.1 - 3.4.15.	0.0.1 - 3.4.15	Low
AIKIDO-2026-289156 dompurify is vulnerable to Cross-Site Scripting (XSS) in versions 3.4.13 - 3.4.15.	3.4.13 - 3.4.15	Low

Package versions

Version	Published	Vulnerabilities
3.4.17	12 Oct 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
3.4.16	23 Sept 2026	0 0 critical, 3 total 0 0 high, 3 total 0 0 medium, 3 total 3 3 low, 3 total
3.4.15	6 Sept 2026	0 0 critical, 5 total 0 0 high, 5 total 0 0 medium, 5 total 5 5 low, 5 total
3.4.14	19 Aug 2026	0 0 critical, 7 total 0 0 high, 7 total 2 2 medium, 7 total 5 5 low, 7 total
3.4.13	3 Aug 2026	0 0 critical, 7 total 0 0 high, 7 total 1 1 medium, 7 total 6 6 low, 7 total
3.4.12	11 Jul 2026	0 0 critical, 7 total 0 0 high, 7 total 1 1 medium, 7 total 6 6 low, 7 total
3.4.11	17 Jun 2026	0 0 critical, 8 total 0 0 high, 8 total 1 1 medium, 8 total 7 7 low, 8 total
3.4.10	12 Jun 2026	0 0 critical, 9 total 0 0 high, 9 total 1 1 medium, 9 total 8 8 low, 9 total
3.4.9	10 Jun 2026	0 0 critical, 9 total 0 0 high, 9 total 1 1 medium, 9 total 8 8 low, 9 total
3.4.8	3 Jun 2026	0 0 critical, 10 total 0 0 high, 10 total 1 1 medium, 10 total 9 9 low, 10 total