Moderate severity6.1NVD Advisory· Published Jul 24, 2026
dompurify: DOMPurify: Cross-Site Scripting (XSS) via custom element attribute bypass
CVE-2026-66010
Description
dompurify: DOMPurify: Cross-Site Scripting (XSS) via custom element attribute bypass
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)
Package: https://rubygems.org/gems/dompurify
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.