CVE-2026-116804

The DOMPurify library (versions 3.4.4 before 3.4.17 ) contains a SAFE_FOR_TEMPLATES bypass. When using RETURN_DOM , RETURN_DOM_FRAGMENT , or IN_PLACE modes, attackers can preserve template expressions within attached shadow roots by splitting them across text nodes separated by disallowed element...