CVE-2026-65901 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, gitlab-rails-ce, wazuh-dashboard, kibana, nextcloud-server, langfuse-fips, librechat, langfuse, gitlab-rails-ce-fips...

CVE-2026-65901 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse...

UBUNTU-CVE-2026-65901

DOMPurify through 3.4.6 contains a cross-site scripting vulnerability in INPLACE mode that trusts attacker-controlled nodeName on live non-form nodes. Attackers can supply hostile live DOM objects with real script children whose observable nodeName is clobbered to appear as allowed elements,...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2166 more potentially affected by CVE-2026-65901 via dompurify (>=3.0.0, <=3.4.6)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =0.2.10 and more Source cves: CVE-2026-65901 Source advisory: OSV:GHSA-X4VX-RJVF-J5P4...