dompurify: DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation
DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation (moderate). GHSA-39q2-94rc-95cp, CVE-2026-65903.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?