Robuta

https://advisories.gitlab.com/npm/dompurify/CVE-2025-15599/ DOMPurify contains a Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD) CVE-2025-15599 DOMPurify contains a Cross-site Scripting vulnerability: DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting... cross site scriptingdompurifycontains https://advisories.gitlab.com/npm/dompurify/CVE-2026-0540/ DOMPurify contains a Cross-site Scripting vulnerability | GitLab Advisory Database (GLAD) CVE-2026-0540 DOMPurify contains a Cross-site Scripting vulnerability: DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in 2.5.9 and 3.3.2, contain... cross site scriptingdompurifycontains https://advisories.gitlab.com/pkg/npm/dompurify/CVE-2025-26791/ https://advisories.gitlab.com/npm/dompurify/CVE-2025-26791/ httpsadvisoriesgitlabnpmdompurify https://advisories.gitlab.com/npm/mermaid/GHSA-m4gq-x24j-jpmf/ Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify | GitLab Advisory... GHSA-m4gq-x24j-jpmf Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify: The following bundled files within the Mermaid NPM... https://advisories.gitlab.com/pypi/dompurify/GMS-2023-29/ dompurify vulnerable to Cross-site Scripting | GitLab Advisory Database (GLAD) GMS-2023-29 dompurify vulnerable to Cross-site Scripting: dompurify prior to version 2.2.2 is vulnerable to cross-site scripting when converting from SVG... cross site scriptingdompurifyvulnerablegitlabadvisory https://advisories.gitlab.com/npm/dompurify/CVE-2026-41240/ DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR... CVE-2026-41240 DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix): There is an inconsistency between... by function