PT-2026-49558

Name of the Vulnerable Software and Affected Versions DOMPurify versions prior to 3.4.6 Description When using DOMPurify.sanitizeroot, IN PLACE: true with a element as the root, an attacker can bypass attribute sanitization. This occurs if a descendant element has a name attribute that clobbers...