Hi, On Fri, Jul 24, 2026 at 10:00:54AM +0200, Xavier Guimard wrote: > notfound 1142688 node-dompurify/3.4.12+dfsg-1 > close 1142688 3.4.12+dfsg-1 > thanks > > Following > https://github.com/cure53/DOMPurify/security/advisories/GHSA-x4vx-rjvf-j5p4 > and "npm audit", CVE is for node-dompurify <= 3.4.6
Okay since we do not have anything better (e.g. a fixing commit here), let's trust the upstream GHSA fixed in note. The issue is fairly low and will be marked no-dsa. Regards, Salvatore
