Skip to content

DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)

Moderate severity GitHub Reviewed Published Apr 20, 2026 in cure53/DOMPurify • Updated Apr 27, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts