PT-2026-63988

Name of the Vulnerable Software and Affected Versions DOMPurify versions prior to 3.4.7 Description When the sanitize function is called without an explicit cfg.ALLOWED TAGS or cfg.ALLOWED ATTR array, direct references to the module-level DEFAULT ALLOWED TAGS and DEFAULT ALLOWED ATTR sets are...