dompurify: DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes
DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes (low). GHSA-6688-9rhm-gjv2, CVE-2026-109345.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?