Dom vulnerabilities

1 known vulnerability in Dom from Phpgt. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Dom: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-46820May 6, 2025Phpgt

  phpgt/Dom provides access to modern DOM APIs. Versions of phpgt/Dom prior to 4.1.8 expose the GITHUB_TOKEN in the Dom workflow run artifact. The ci.yml workflow file uses actions/upload-artifact@v4 to upload the build artifact. This artifact is a zip of the cu