ROOT-APP-NPM-CVE-2026-65902 CVE-2026-65902 in dompurify - Patched by Root

Root has patched CVE-2026-65902 in the dompurify package for Root:npm. Multiple fixed versions available...

CVE-2026-65902 vulnerabilities

Vulnerabilities for packages: langfuse, wazuh-dashboard-fips, gitlab-rails-ce, kibana, wazuh-dashboard, langfuse-fips, gitlab-rails-ce-fips, librechat, nextcloud-server...

CVE-2026-65902 vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server...

011xwztpjn (1.0.0), 02y9dg4qm3 (1.0.0) +11611 more potentially affected by CVE-2026-65902 via dompurify (>=0.6.6, <=3.4.6)

dompurify NPM version =0.6.6, =3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on dompurify and may be impacted: - 011xwztpjn 1.0.0 - 02y9dg4qm3 1.0.0 - 04tw75kmd9 1.0.0 - 0650teqqly 1.0.0 - 097oi25ils 1.0.0 - 0a0fpniotn 1.0.0 - 0c7j76u46q 1.0.0 -...

CVE-2026-65902

DOMPurify before 3.4.7 affected versions = 3.4.5 passes direct references to the module-level DEFAULTALLOWEDTAGS and DEFAULTALLOWEDATTR sets to the uponSanitizeElement and uponSanitizeAttribute hooks via data.allowedTags / data.allowedAttributes when sanitize is called without an explicit...

com.codbex.atlas:codbex-atlas-application (>=2.111.0, <=14.90.0), com.codbex.hades:codbex-hades-application (>=2.81.0, <=14.62.0) +13 more potentially affected by CVE-2026-65902 via org.webjars.npm:dompurify (>=3.1.7, <=3.3.0)

org.webjars.npm:dompurify MAVEN version =3.1.7, =2.111.0, =2.81.0, =2.80.0, =2.73.0, =2.72.0, =1.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =13.6.0, =0.54.0, =0.55.1 Source cves: CVE-2026-65902 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17344517...

8router (>=0.5.12, <=0.5.24), @11kit/tinyengine-material (>=1.0.0, <=1.0.7) +2155 more potentially affected by CVE-2026-65902 via dompurify (>=3.0.0, <=3.4.6)

dompurify NPM version =3.0.0, =0.5.12, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =1.0.0, =4.4.0-rc1, =6.4.10, =5.1.1, =5.2.5 and more Source cves: CVE-2026-65902 Source advisory: OSV:GHSA-76MC-F452-CXCM...