CVE-2026-65901 vulnerabilities

Vulnerabilities for packages: librechat, kibana, nextcloud-server, langfuse-fips, wazuh-dashboard-fips, wazuh-dashboard, langfuse...

CVE-2026-65901 vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server...

UBUNTU-CVE-2026-65901

DOMPurify through 3.4.6 contains a cross-site scripting vulnerability in INPLACE mode that trusts attacker-controlled nodeName on live non-form nodes. Attackers can supply hostile live DOM objects with real script children whose observable nodeName is clobbered to appear as allowed elements,...