CVE-2026-66010
Fixed in a distro release EPSS <1%CVSS 6.1
DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOM_ELEMENT_HANDLING.tagNameCheck, allowing attributes to bypass application security policies. Attackers can preserve sensitive attributes on custom elements that later re-inject them into innerHTML sinks, creating second-order XSS gadgets.
Products: cure53 dompurify
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | dompurify | 3.4.12 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | airflow-2 | no fix |
| Chainguard | airflow-core-2 | no fix |
| Chainguard | awx | 24.6.1-r45 |
| Chainguard | gitlab-rails-ce-18.1 | no fix |
| Chainguard | gitlab-rails-ce-18.10 | no fix |
| Chainguard | gitlab-rails-ce-18.11 | 18.11.13-r0 |
| Chainguard | gitlab-rails-ce-18.6 | no fix |
| Chainguard | gitlab-rails-ce-18.7 | no fix |
| Chainguard | gitlab-rails-ce-18.8 | no fix |
| Chainguard | gitlab-rails-ce-18.9 | no fix |
| Chainguard | gitlab-rails-ce-19.0 | 19.0.10-r0 |
| Chainguard | gitlab-rails-ce-19.1 | 19.1.7-r6 |
| Chainguard | gitlab-rails-ce-19.2 | 19.2.5-r2 |
| Chainguard | gitlab-rails-ce-fips-18.1 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.10 | 18.10.8-r8 |
| Chainguard | gitlab-rails-ce-fips-18.11 | 18.11.12-r2 |
| Chainguard | gitlab-rails-ce-fips-18.6 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.7 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.8 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.9 | 18.9.8-r8 |
| Chainguard | gitlab-rails-ce-fips-19.0 | 19.0.9-r3 |
| Chainguard | gitlab-rails-ce-fips-19.1 | 19.1.7-r7 |
| Chainguard | gitlab-rails-ce-fips-19.2 | 19.2.5-r2 |
| Chainguard | jupyter-base-notebook | 7.6.3-r2 |
| Chainguard | kibana-9.2 | 9.2.8-r17 |
| Chainguard | kibana-9.2-iamguarded | 9.2.8-r17 |
| Chainguard | langfuse-2 | 2.95.12-r35 |
| Chainguard | langfuse-2-worker | 2.95.12-r35 |
| Chainguard | langfuse-3-compat | 3.225.7-r6 |
| Chainguard | langfuse-3-worker | 3.224.1-r0 |
| Chainguard | langfuse-fips-2 | 2.95.12-r38 |
| Chainguard | langfuse-fips-2-worker | 2.95.12-r38 |
| Chainguard | langfuse-fips-3-worker | 3.224.1-r0 |
| Chainguard | librechat | 0.8.7-r5 |
| Chainguard | nextcloud-server-31 | no fix |
| Chainguard | nextcloud-server-32 | 32.0.13-r1 |
| Chainguard | nextcloud-server-33 | 33.0.7-r5 |
| Chainguard | nextcloud-server-34 | 34.0.3-r1 |
| Chainguard | opensearch-dashboards-2 | 2.19.6-r8 |
| Chainguard | opensearch-dashboards-2-dashboards-reporting | 2.19.6-r8 |
| Chainguard | opensearch-dashboards-2-fips | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-2-fips-alerting-dashboards-plugin | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-maps | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-notifications | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-observability | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-query-workbench | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-reporting | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-search-relevance | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-visualizations | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-2-fips-index-management-dashboards-plugin | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-2-fips-ml-commons-dashboards | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-2-fips-security-analytics-dashboards-plugin | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-2-fips-security-dashboards-plugin | 2.19.5-r18 |
| Chainguard | opensearch-dashboards-3 | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-alerting-dashboards-plugin | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-anomaly-detection-dashboards-plugin | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-dashboards-maps | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-dashboards-notifications | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-dashboards-observability | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-dashboards-query-workbench | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-dashboards-reporting | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-dashboards-search-relevance | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-fips | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-fips-alerting-dashboards-plugin | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-maps | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-notifications | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-observability | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-query-workbench | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-reporting | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-search-relevance | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-fips-index-management-dashboards-plugin | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-fips-ml-commons-dashboards | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-fips-security-analytics-dashboards-plugin | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-fips-security-dashboards-plugin | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-index-management-dashboards-plugin | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-ml-commons-dashboards | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-security-analytics-dashboards-plugin | 3.7.0-r7 |
| Chainguard | opensearch-dashboards-3-security-dashboards-plugin | 3.7.0-r7 |
| Chainguard | tensorflow-gpu-jupyter | 2.21.0-r12 |
| Chainguard | wazuh-dashboard | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-alerting-dashboards-plugin | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-alerting-dashboards-plugin-fips | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-anomaly-detection-dashboards-plugin | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-anomaly-detection-dashboards-plugin-fips | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-dashboards-maps | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-dashboards-maps-fips | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-dashboards-notifications | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-dashboards-notifications-fips | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-dashboards-reporting | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-dashboards-reporting-fips | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-dashboards-visualizations | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-dashboards-visualizations-fips | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-fips | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-index-management-dashboards-plugin | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-index-management-dashboards-plugin-fips | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-plugins | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-plugins-fips | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-security-plugin | 4.14.7-r2 |
| Chainguard | wazuh-dashboard-security-plugin-fips | 4.14.7-r2 |
| Debian 12 | node-dompurify | no fix |
| Debian 13 | node-dompurify | no fix |
| Debian 14 | node-dompurify | 3.4.12+dfsg-1 |
| Ubuntu 22.04 LTS | node-dompurify | no fix |
| Ubuntu 24.04 LTS | node-dompurify | no fix |
| Ubuntu 26.04 LTS | node-dompurify | no fix |
| Wolfi | jupyter-base-notebook | 7.6.3-r2 |
| Wolfi | langfuse-3-compat | 3.225.7-r6 |
| Wolfi | langfuse-3-worker | 3.224.1-r0 |
| Wolfi | nextcloud-server-33 | 33.0.7-r5 |
| Wolfi | opensearch-dashboards-3 | 3.7.0-r7 |
| Wolfi | opensearch-dashboards-3-alerting-dashboards-plugin | 3.7.0-r7 |
| Wolfi | opensearch-dashboards-3-anomaly-detection-dashboards-plugin | 3.7.0-r7 |
| Wolfi | opensearch-dashboards-3-dashboards-maps | 3.7.0-r7 |
| Wolfi | opensearch-dashboards-3-dashboards-notifications | 3.7.0-r7 |
| Wolfi | opensearch-dashboards-3-dashboards-observability | 3.7.0-r7 |
| Wolfi | opensearch-dashboards-3-dashboards-query-workbench | 3.7.0-r7 |
| Wolfi | opensearch-dashboards-3-dashboards-reporting | 3.7.0-r7 |
| Wolfi | opensearch-dashboards-3-dashboards-search-relevance | 3.7.0-r7 |
| Wolfi | opensearch-dashboards-3-index-management-dashboards-plugin | 3.7.0-r7 |
| Wolfi | opensearch-dashboards-3-ml-commons-dashboards | 3.7.0-r7 |
| Wolfi | opensearch-dashboards-3-security-analytics-dashboards-plugin | 3.7.0-r7 |
| Wolfi | opensearch-dashboards-3-security-dashboards-plugin | 3.7.0-r7 |