DOMPurify Trusted Types Policy Persistence Leading to XSS via clearConfig Bypass

github.com 2026-07-23查看中文 →

Security AdvisoryLowDOMPurify

Affected:

DOMPurify 3.0.0

Fixed in:

DOMPurify 3.4.9

Referenced CVEs: CVE-2026-65899 · 6.1

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

PHP BCMath Out-of-Bounds Write Vulnerability Analysis 2026-07-30 PHP Phar Stack Overflow Vulnerability via Circular Symlinks 2026-07-30 SQL Injection in PHP ext-pgsq1 via E'...' backslash breakout with PoC 2026-07-30 DFIR-IRIS Stored XSS Vulnerabilities (CVE-2026-16969, CVE-2026-18360, CVE-2026-18361) and POC 2026-07-30 DFIR-IRIS Missing Brute Force Protection on MFA and Auth Endpoints (CVE-2026-16971/18362) 2026-07-30

Offline Archive

Offline screenshot & PDF are Pro-exclusive