Security
فارسی
All products

Red Hat build of Apache Camel - HawtIO 4/dompurify

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.CVE-2026-66010 · GHSA-C2J3-45GR-MQC4 dompurifyCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Low Fix reported
DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING FallbackCVE-2026-41238 · GHSA-V9JR-RG53-9PGP dompurifyCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.contentCVE-2026-49978 · GHSA-RP9W-3FW7-7CWQ dompurifyCryostat 4/grafana-infinity-datasource-npm npmRed Hat Medium Fix reported
DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modesCVE-2026-65900 · GHSA-GVMJ-G25R-R7WR dompurifyCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Low Fix reported
DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM modeCVE-2026-41239 · GHSA-CRV5-9VWW-Q3G8 dompurifyCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluationCVE-2026-65903 · GHSA-39Q2-94RC-95CP dompurifyCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported