NPM: DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes

NPM: DOMPurify: INPLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes vulnerability discovered by ? in WordPress Npm dompurify versions = 3.4.15...