Threats tagged 'ghsa-6vxf-252m-8g79'

DOMPurify versions from 3.4.4 up to but not including 3.4.17 contain a vulnerability where the SAFE_FOR_TEMPLATES feature can be bypassed. This allows attackers to preserve template expressions in attached shadow roots when using certain DOMPurify return modes. By splitting expressions across text nodes separated by disallowed elements, attackers can cause these expressions to merge after sanitization and be evaluated by downstream template engines, leading to cross-site scripting (XSS).