CVE-2026-116802

A flaw was found in DOMPurify. This vulnerability allows a remote attacker to perform cross-site scripting XSS. When configured to parse Extensible Hypertext Markup Language XHTML content, the library fails to properly normalize and sanitize attribute names within animation elements. An attacker...