| DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modesCVE-2026-116804 · GHSA-CG2G-XH64-V4Q7 |
dompurifyRed Hat Hardened Images/grafana13.2 |
npmRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xmlCVE-2026-116802 · GHSA-C6GR-QVV4-5V3F |
dompurifyRed Hat Hardened Images/grafana13.2 |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)CVE-2026-116803 · GHSA-MRV2-3PQR-J5JR |
dompurifyRed Hat Hardened Images/grafana13.2 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executesCVE-2026-109345 · GHSA-6688-9RHM-GJV2 |
dompurify |
npm |
کم
|
اصلاح گزارش شده |
|
| DOMPurify: IN_PLACE: node-removing afterSanitize hook leaves detached subtree event handlers armed, causing DOM XSSCVE-2026-109344 · GHSA-P98J-92PF-MC4P |
dompurify |
npm |
کم
|
اصلاح گزارش شده |
|
| DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.CVE-2026-66010 · GHSA-C2J3-45GR-MQC4 |
dompurifyCryostat 4/cryostat-openshift-console-plugin-npm |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSSCVE-2026-75838 · GHSA-55Q2-FJHQ-7XH7 |
dompurifyAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOMCVE-2026-49459 · GHSA-R47G-FVHR-H676 |
dompurifyMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch)CVE-2026-65898 · GHSA-CMWH-PVXP-8882 |
dompurifyMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING FallbackCVE-2026-41238 · GHSA-V9JR-RG53-9PGP |
dompurifyCryostat 4/cryostat-openshift-console-plugin-npm |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| DOMPurify is vulnerable to mutation-XSS via Re-Contextualization CVE-2026-65914 · GHSA-H8R8-WCCR-V5F2 |
dompurifyMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| DOMPurify: `IN_PLACE` mode trusts attacker-controlled `nodeName` on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objectsCVE-2026-65901 · GHSA-X4VX-RJVF-J5P4 |
dompurifyAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 |
npmRed Hat |
کم
|
اصلاح اعلام نشده |
|
| DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.contentCVE-2026-49978 · GHSA-RP9W-3FW7-7CWQ |
dompurifyCryostat 4/grafana-infinity-datasource-npm |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modesCVE-2026-65900 · GHSA-GVMJ-G25R-R7WR |
dompurifyCryostat 4/cryostat-openshift-console-plugin-npm |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checksCVE-2026-49458 · GHSA-HPCV-96WG-7VJ8 |
dompurifyMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| DOMPurify: Hook mutation of `data.allowedTags` / `data.allowedAttributes` permanently pollutes `DEFAULT_ALLOWED_TAGS` / `DEFAULT_ALLOWED_ATTR`CVE-2026-65902 · GHSA-76MC-F452-CXCM |
dompurifyAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)CVE-2026-41240 · GHSA-H7MW-GPVR-XQ4M |
dompurifyCryostat 4/cryostat-openshift-console-plugin-npm |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| DOMPurify USE_PROFILES prototype pollution allows event handlersCVE-2026-65913 · GHSA-CJ63-JHHR-WCXV |
dompurifyMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| DOMPurify ADD_ATTR predicate skips URI validationCVE-2026-65912 · GHSA-CJMM-F4JC-QW8R |
dompurifyMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM modeCVE-2026-41239 · GHSA-CRV5-9VWW-Q3G8 |
dompurifyCryostat 4/cryostat-openshift-console-plugin-npm |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
