A vulnerability labeled as problematic has been found in cure53 DOMPurify up to 3.3.x. This affects an unknown part. Executing a manipulation can lead to permissive list of allowed inputs.
This vulnerability is tracked as CVE-2026-41240. The attack can be launched remotely. No exploit exists.
The affected component should be upgraded.
