CVE-2026-65902 vulnerabilities

Vulnerabilities for packages: langfuse, kibana, librechat, wazuh-dashboard, wazuh-dashboard-fips, nextcloud-server, langfuse-fips...

CVE-2026-65902 vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server...

CVE-2026-65902

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:19+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-76mc-f452-cxcm...

DEBIAN-CVE-2026-65902

DOMPurify before 3.4.7 affected versions = 3.4.5 passes direct references to the module-level DEFAULTALLOWEDTAGS and DEFAULTALLOWEDATTR sets to the uponSanitizeElement and uponSanitizeAttribute hooks via data.allowedTags / data.allowedAttributes when sanitize is called without an explicit...

CVE-2026-65902

DOMPurify before 3.4.7 affected versions = 3.4.5 passes direct references to the module-level DEFAULTALLOWEDTAGS and DEFAULTALLOWEDATTR sets to the uponSanitizeElement and uponSanitizeAttribute hooks via data.allowedTags / data.allowedAttributes when sanitize is called without an explicit...