Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
dompurify could let attackers inject malicious content
published 1 month ago
Summary
The dompurify library has a security weakness that could allow attackers to insert harmful code into web pages. TuxCare has released an updated version (3.2.3-tuxcare.4) that fixes this issue. Apply the update promptly to keep your sites safe.
What to do
- Update dompurify to version 3.2.3-tuxcare.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | – | dompurify |
< 3.2.3-tuxcare.4 Fix: upgrade to 3.2.3-tuxcare.4
|
Original advisory text
TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.2.3-tuxcare.4.
Timeline
Published11 Sep 2026
Updated12 Sep 2026
First seen11 Sep 2026
Sources
CLSA-2026-1789146735 · OSV
Track software like this
Free during beta