Detections
Analytics
SCA: security update for dompurify (GHSA-c2j3-45gr-mqc4)
high Tenable Cloud Security Plugin ID 445098
Description
DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.Solution
Update the dompurify library and its related packages to version 3.4.12 or later.See Also
Plugin Details
Severity: High
ID: 445098
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 7/22/2026
Updated: 7/22/2026
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 7/21/2026
Vulnerability Publication Date: 7/21/2026