Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-a5a3-4e39-a94b
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-a5a3-4e39-a94b.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-a5a3-4e39-a94b
Upstream
CVE-2026-41240
GHSA-h7mw-gpvr-xq4m
Published
2026-09-28T00:01:20Z
Modified
2026-09-28T00:45:23Z
Summary
[none]
Details
References
https://advisory.echohq.com/cve/CVE-2026-41240
https://github.com/advisories/GHSA-h7mw-gpvr-xq4m
Affected packages
Echo:npm
/
dompurify
Package
Name
dompurify
Purl
pkg:npm/dompurify
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
3.4.0
Database specific
source
"https://advisory.echohq.com/osv/ECHO-a5a3-4e39-a94b.json"
ECHO-a5a3-4e39-a94b - OSV