---
id: 4794
title: "[CVE-2024-9143] DOMPurify bypasses, prompt injecting ChatGPT to shell, AI fuzz finds – ethical hacker news roundup"
cve: CVE-2024-9143
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/news/dompurify-bypasses-chatgpt-ai-fuzz"
published_at: "2024-12-16 14:36"
tags: ["ai-security", "prompt-injection", "llm-security", "openssl", "oss-fuzz", "dompurify", "roundup"]
phying_url: "https://phying.com/item/4794"
lang: en
---

# [CVE-2024-9143] DOMPurify bypasses, prompt injecting ChatGPT to shell, AI fuzz finds – ethical hacker news roundup

## Summary

Roundup: DOMPurify bypasses in default configs through v3.1.2, prompt injection to shell in OpenAI's containerised ChatGPT, and AI-enhanced OSS-Fuzz finding 26 flaws incl. OpenSSL CVE-2024-9143.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **CVE:** CVE-2024-9143
- **Published:** 2024-12-16 14:36
- **Original:** https://www.yeswehack.com/news/dompurify-bypasses-chatgpt-ai-fuzz
- **Phying News:** https://phying.com/item/4794