Skip to content

chore(deps): patches dompurify for CVE-2026-41240 #5035

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
alizard0 wants to merge 3 commits into
base: release-1.9
Choose a base branch
from
+690 −292
Open

chore(deps): patches dompurify for CVE-2026-41240 #5035

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
8066a1a
surgeon/bump dompurify
alizard0 Jun 30, 2026
3ba6f89
bump swagger-api -> dompurify
alizard0 Jul 1, 2026
fc168cb
bump dompurify
alizard0 Jul 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions dynamic-plugins/yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20594,14 +20594,14 @@ __metadata:
linkType: hard

"dompurify@npm:^3.2.4":
version: 3.3.1
resolution: "dompurify@npm:3.3.1"
version: 3.4.0
resolution: "dompurify@npm:3.4.0"
dependencies:
"@types/trusted-types": ^2.0.7
dependenciesMeta:
"@types/trusted-types":
optional: true
checksum: 884fe0acc21a9a2e5aa1b8ce4cecc8f9a71217423b389f760fca7b44595d3c9376d234f1c4ba16d79824789762b3d611d10653c4a90a7e23b351b71e5ef7dd33
checksum: 8c4286d3d379c6133ff2951d73d946974ef079f5d651d66cf90c1a6e57d8d2d304e7bc18280d27c38835200bbe03877fd93fb22f9f1fb9e086d68ffcd2d5dd16
languageName: node
linkType: hard

Expand Down
14 changes: 13 additions & 1 deletion yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21870,7 +21870,7 @@ __metadata:
languageName: node
linkType: hard

"dompurify@npm:=3.2.6, dompurify@npm:^3.2.4":
"dompurify@npm:=3.2.6":

@kim-tsao kim-tsao Jun 30, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is still pinned. Can we update it?

@alizard0 alizard0 Jul 3, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated.

version: 3.2.6
resolution: "dompurify@npm:3.2.6"
dependencies:
Expand All @@ -21882,6 +21882,18 @@ __metadata:
languageName: node
linkType: hard

"dompurify@npm:^3.2.4":
version: 3.4.0
resolution: "dompurify@npm:3.4.0"
dependencies:
"@types/trusted-types": ^2.0.7
dependenciesMeta:
"@types/trusted-types":
optional: true
checksum: 8c4286d3d379c6133ff2951d73d946974ef079f5d651d66cf90c1a6e57d8d2d304e7bc18280d27c38835200bbe03877fd93fb22f9f1fb9e086d68ffcd2d5dd16
languageName: node
linkType: hard

"domutils@npm:^2.5.2, domutils@npm:^2.8.0":
version: 2.8.0
resolution: "domutils@npm:2.8.0"
Expand Down
Loading