Lucene search
+L

DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes

๐Ÿ—“๏ธย 15 Jun 2026ย 20:02:40Reported byย GitHub Advisory DatabaseTypeย 
github
ย github
๐Ÿ”—ย github.com๐Ÿ‘ย 23ย Views

SAFE_FOR_TEMPLATES with DOM output allows template expressions to survive in template content.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-65900
23 Jul 202613:16
โ€“attackerkb
Circl
CVE-2026-65900
23 Jul 202616:35
โ€“circl
CVE
CVE-2026-65900
23 Jul 202613:16
โ€“cve
Cvelist
CVE-2026-65900 DOMPurify before 3.4.8 Template Expression Injection via RETURN_DOM
23 Jul 202613:16
โ€“cvelist
Debian CVE
CVE-2026-65900
23 Jul 202613:16
โ€“debiancve
EUVD
EUVD-2026-48269
23 Jul 202613:16
โ€“euvd
NVD
CVE-2026-65900
23 Jul 202614:18
โ€“nvd
OSV
CVE-2026-65900 DOMPurify before 3.4.8 Template Expression Injection via RETURN_DOM
23 Jul 202613:16
โ€“osv
OSV
DEBIAN-CVE-2026-65900
23 Jul 202621:48
โ€“osv
OSV
GHSA-GVMJ-G25R-R7WR DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes
15 Jun 202620:02
โ€“osv
Rows per page
Vulners
Node
cure53dompurifyRange3.0.0โ€“3.4.7npm

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

23 Jul 2026 14:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 45.1
CVSS 3.16.1
SSVC
23