https://advisories.gitlab.com/npm/dompurify/CVE-2025-15599/
DOMPurify contains a Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD)
CVE-2025-15599 DOMPurify contains a Cross-site Scripting vulnerability: DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting...
cross site scriptingdompurifycontains
https://advisories.gitlab.com/npm/dompurify/CVE-2026-0540/
DOMPurify contains a Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD)
CVE-2026-0540 DOMPurify contains a Cross-site Scripting vulnerability: DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in 2.5.9 and 3.3.2, contain...
cross site scriptingdompurifycontains
https://advisories.gitlab.com/pkg/npm/dompurify/CVE-2025-26791/
https://advisories.gitlab.com/npm/dompurify/CVE-2025-26791/
httpsadvisoriesgitlabnpmdompurify
https://advisories.gitlab.com/npm/mermaid/GHSA-m4gq-x24j-jpmf/
Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify | GitLab Advisory...
GHSA-m4gq-x24j-jpmf Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify: The following bundled files within the Mermaid NPM...
https://advisories.gitlab.com/pypi/dompurify/GMS-2023-29/
dompurify vulnerable to Cross-site Scripting | GitLab Advisory Database (GLAD)
GMS-2023-29 dompurify vulnerable to Cross-site Scripting: dompurify prior to version 2.2.2 is vulnerable to cross-site scripting when converting from SVG...
cross site scriptingdompurifyvulnerablegitlabadvisory
https://advisories.gitlab.com/npm/dompurify/CVE-2026-41240/
DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR...
CVE-2026-41240 DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix): There is an inconsistency between...
by function