CVE-2025-26791

Publication date

2025-02-14 00:00:00

Family

mitre

State

PUBLISHED

Description

DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).