3 matches found
SUSE CVE-2026-65900
DOMPurify versions =3.0.0 and before 3.4.8, when configured with SAFEFORTEMPLATES together with a DOM output mode RETURNDOM, RETURNDOMFRAGMENT, or INPLACE, fail to strip template expressions e.g. $evil, evil, inside element content. The final normalization/scrub pass scrubTemplateExpressions uses...
6.1CVSS5.4AI score0.00209EPSS
SaveExploits1References3
CVE-2026-65900 vulnerabilities
Vulnerabilities for packages: nextcloud-server, langfuse...
6.1CVSS6.1AI score0.00209EPSS
SaveExploits1
CVE-2026-65900
DOMPurify versions =3.0.0 and before 3.4.8, when configured with SAFEFORTEMPLATES together with a DOM output mode RETURNDOM, RETURNDOMFRAGMENT, or INPLACE, fail to strip template expressions e.g. $evil, evil, inside element content. The final normalization/scrub pass scrubTemplateExpressions uses...
6.1CVSS5.3AI score0.00209EPSS
SaveExploits1
20