CVE-2026-65914

DOMPurify contains a mutation-XSS in versions before 3.3.2 when sanitized HTML is reinserted into special parsing contexts via innerHTML wrappers (script, xmp, iframe, noembed, noframes, noscript). Attackers can craft payloads with closing sequences to break out of the wrapper during reparsing, r...

GHSA-H8R8-WCCR-V5F2 DOMPurify is vulnerable to mutation-XSS via Re-Contextualization

Description A mutation-XSS mXSS condition was confirmed when sanitized HTML is reinserted into a new parsing context using innerHTML and special wrappers. The vulnerable wrappers confirmed in browser behavior are script, xmp, iframe, noembed, noframes, and noscript. The payload remains seemingly...