dompurify: DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content
DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content (moderate). GHSA-rp9w-3fw7-7cwq, CVE-2026-49978.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?