CVE-2026-116804

A flaw was found in DOMPurify. When configured to sanitize content for template engines, DOMPurify fails to properly scrub template expressions within attached shadow roots. A remote attacker can exploit this flaw by supplying crafted markup with expressions split across disallowed elements, whic...

EUVD-2026-110512

DOMPurify from 3.4.4 before 3.4.17 contains a SAFEFORTEMPLATES bypass that lets attackers preserve template expressions in attached shadow roots when using RETURNDOM, RETURNDOMFRAGMENT, or INPLACE modes. Attackers can split expressions across text nodes separated by disallowed elements, which mer...

PT-2026-125510

DOMPurify from 3.4.4 before 3.4.17 contains a SAFE FOR TEMPLATES bypass that lets attackers preserve template expressions in attached shadow roots when using RETURN DOM, RETURN DOM FRAGMENT, or IN PLACE modes. Attackers can split expressions across text nodes separated by disallowed elements, whi...