CVE-2025-26791
DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).
Open
LOW (0.6)- T
Tim Bastin detected CVE-2025-26791 with a risk of 0.45
System updated the risk assessment to 0.36
System recalculated raw risk assessment
- t
timbastin (GitHub) added a comment
This is implemented already 🙂
System updated the risk assessment from 0.36 to 0.6
System recalculated raw risk assessment
System
System
System
System
System updated the risk assessment from 0.6 to 1.8
System recalculated raw risk assessment
System fixed CVE-2025-26791
System detected CVE-2025-26791 with a risk of 0.6
Add a comment
Last calculated at:
Affected component
dompurify
Quick Fix
Update all Dependencies
Update only dompurify