Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#sanitization

1 articles

Deep Dive

GHSA-cg2g-xh64-v4q7: DOMPurify SAFE_FOR_TEMPLATES Bypass in Shadow Roots

DOMPurify 3.4.4–3.4.16 lets split ${...} expressions survive SAFE_FOR_TEMPLATES inside attached shadow roots (Critical, CVSS v4.0 9.2). Upgrade to 3.4.17.

Ostorlab Team
Oct 23, 2026