Lucene search
+L

GHSA-GVMJ-G25R-R7WR DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes

๐Ÿ—“๏ธย 15 Jun 2026ย 20:02:40Reported byย GoogleTypeย 
osv
ย osv
๐Ÿ”—ย osv.dev๐Ÿ‘ย 18ย Views

SAFE_FOR_TEMPLATES bypass lets template expressions survive in template content for DOM return paths.

Related
Refs
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2026-65900
23 Jul 202613:16
โ€“attackerkb
cgr
Chainguard
CVE-2026-65900 vulnerabilities
24 Jul 202620:25
โ€“cgr
circl
Circl
CVE-2026-65900
23 Jul 202616:35
โ€“circl
cve
CVE
CVE-2026-65900
23 Jul 202613:16
โ€“cve
cvelist
Cvelist
CVE-2026-65900 DOMPurify before 3.4.8 Template Expression Injection via RETURN_DOM
23 Jul 202613:16
โ€“cvelist
debiancve
Debian CVE
CVE-2026-65900
23 Jul 202613:16
โ€“debiancve
euvd
EUVD
EUVD-2026-48269
23 Jul 202613:16
โ€“euvd
github
Github Security Blog
DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes
15 Jun 202620:02
โ€“github
nvd
NVD
CVE-2026-65900
23 Jul 202614:18
โ€“nvd
osv
OSV
CGA-Q65M-X2FC-C4PF
24 Jul 202613:23
โ€“osv
Rows per page

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

24 Jul 2026 16:01Current
5.8Medium risk
Vulners AI Score5.8
CVSS 45.1
EPSS0.0018
18