Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
dompurify may allow harmful content, updated version fixes it
published 2 months ago
Summary
The dompurify component, which cleans HTML to keep web pages safe, had many security gaps that could let attackers inject malicious code. TuxCare has released a rebuilt version (3.0.3‑tuxcare.1) that closes all of these gaps. Upgrade to this new version promptly to protect your sites.
What to do
- Update dompurify to version 3.0.3-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | – | dompurify |
< 3.0.3-tuxcare.1 Fix: upgrade to 3.0.3-tuxcare.1
|
Original advisory text
TuxCare security update for dompurify (34 CVEs)
TuxCare rebuilt dompurify to address 34 CVEs. Fixed in 3.0.3-tuxcare.1.
Timeline
Published14 Aug 2026
Updated5 Sep 2026
First seen15 Aug 2026
Sources
CLSA-2026-1786731948 · OSV
Track software like this
Free during beta