dompurify: DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS (moderate). GHSA-55q2-fjhq-7xh7, CVE-2026-75838.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?