dompurify: DOMPurify ADD_ATTR predicate skips URI validation
DOMPurify ADD_ATTR predicate skips URI validation (moderate). GHSA-cjmm-f4jc-qw8r, CVE-2026-65912.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
DOMPurify ADD_ATTR predicate skips URI validation
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?