Skip to content

[GHSA-mrv2-3pqr-j5jr] DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p) - #10523

Open
cure53 wants to merge 1 commit into
cure53/advisory-improvement-10523from
cure53-GHSA-mrv2-3pqr-j5jr
Open

[GHSA-mrv2-3pqr-j5jr] DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)#10523
cure53 wants to merge 1 commit into
cure53/advisory-improvement-10523from
cure53-GHSA-mrv2-3pqr-j5jr

Commits

  1. Commits on Oct 23, 2026