CVE-2026-65901 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, kibana, langfuse, wazuh-dashboard-fips, langfuse-fips, nextcloud-server, librechat...

CVE-2026-65901 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse...

UBUNTU-CVE-2026-65901

DOMPurify through 3.4.6 contains a cross-site scripting vulnerability in INPLACE mode that trusts attacker-controlled nodeName on live non-form nodes. Attackers can supply hostile live DOM objects with real script children whose observable nodeName is clobbered to appear as allowed elements,...