2 matches found
CVE-2026-65912 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard...
DEBIAN-CVE-2026-65912
DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADDATTR is provided as a predicate function via EXTRAELEMENTHANDLING.attributeCheck. Attackers can supply a predicate that accepts specific attribute and tag combinations to bypass URI-safe validation, allowing unsafe...