1 low-priority security issue in bookworm

package:
node-dompurify
severity:
low
created:
2025-02-14
last updated:
2025-05-01

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:
  • CVE-2025-26791: (needs triaging) DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).

You can find information about how to handle this issue in the security team's documentation.