GHSA-mrv2-3pqr-j5jr
HighAdvisory
Published 22 Oct 2026In the index since 23 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.6
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 111
- of 18,232 indexed, latest versions
- Container images
- 97
- deployed by those charts
- Fix available
- 1 of 1
- affected package
DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)
Carried by container images the latest versions of 111 of 18,232 indexed charts deploy, on 97 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| dompurifynpm | 1.0.11, 2.1.1, 2.2.6, 2.2.7+34 more | 3.4.17 | 97 |
- OSV records
- GHSA-mrv2-3pqr-j5jr
Charts affected
111 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| opensearch-dashboardsopensearch-project-helm-chartsVerified publisher | 3.9.0 | 1 of 1See more | 408 |
| homarrhomarr-labsOfficialVerified publisher | 8.37.0 | 1 of 1See more | 218 |
| wazuhwazuh-helm-morgovedVerified publisher | 2.0.7 | 1 of 5See more | 13,755 |
| oneuptimeoneuptimeOfficialVerified publisher | 14.0.85 | 3 of 7See more | 9,101 |
| openclawopenclaw-helmVerified publisher | 1.5.40 | 1 of 2See more | 6,758 |
| outlinekubitodevVerified publisher | 1.2.2 | 1 of 4See more | 6,514 |
| outlineoutline | 0.0.9 | 1 of 4See more | 5,697 |
| apim3graviteeioVerified publisher | 4.13.0 | 1 of 4See more | 4,610 |
| krokicowboysysopVerified publisher | 6.2.0 | 1 of 5See more | 2,799 |
| hedgedocadfinisVerified publisher | 0.6.1 | 1 of 2See more | 5,498 |
| docmosthelmforgeVerified publisher | 1.4.4 | 1 of 4See more | 4,686 |
| wazuhwazuh-helmVerified publisher | 0.0.8 | 1 of 4See more | 8,148 |
| wikijsgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 6,324 |
| karakeephelmforgeVerified publisher | 1.2.11 | 1 of 3See more | 10,843 |
| kubernetes-loggingkubernetes-logging | 4.8.0 | 1 of 6See more | 12,310 |
| ghostcloudpirates-ghostVerified publisher | 0.20.32 | 1 of 3See more | 8,837 |
| nightscoutgabe565Verified publisher | 0.13.0 | 1 of 2See more | 2,753 |
| mealiegeek-cookbookVerified publisher | 5.1.2 | 1 of 2See more | 9,864 |
| ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher | 2.0.2 | 1 of 3See more | 1,663 |
| graphql-hivegraphql-hive | 1.0.0 | 1 of 17See more | 12,273 |
| apimgraviteeioVerified publisher | 4.13.0 | 1 of 4See more | 4,610 |
| hedgedocrobertobochetVerified publisher | 1.4.0 | 1 of 1See more | 2,825 |
| nocodbzekker6Verified publisher | 1.10.0 | 1 of 1See more | 5,712 |
| siemassist-iot-cybersecurity-monitroting-siem | 0.1.0 | 1 of 3See more | 12,620 |
| betterdb-monitorbetterdb-monitorOfficialVerified publisher | 0.51.1 | 1 of 1See more | 391 |
| opensearch-dashboardscaptnbpVerified publisher | 2.2.1 | 1 of 1See more | 2,037 |
| maildevchristianhuthVerified publisher | 1.6.1 | 1 of 1See more | 1,568 |
| kubedashdevopstalesOfficialVerified publisher | 4.0.0 | 1 of 8See more | 12,937 |
| recipesgeek-cookbookVerified publisher | 6.6.2 | 1 of 2See more | 9,190 |
| ghostgroundhog2k | 0.212.18 | 1 of 1See more | 1,993 |
| stackradarlockdepVerified publisher | 0.2.0 | 1 of 4See more | 5,899 |
| plane-enterprisemakeplaneOfficialVerified publisher | 3.10.12 | 1 of 13See more | 7,522 |
| openclawopenclaw-helm-chartVerified publisher | 1.0.70 | 1 of 3See more | 2,205 |
| karakeepself-hosters-by-nightVerified publisher | 2.5.1 | 1 of 1See more | 6,384 |
| supabasesupabse | 0.8.0 | 1 of 11See more | 55,104 |
| wikiwenerme | 2.2.0 | 1 of 2See more | 2,652 |
| trifidzazukoOfficialVerified publisher | 0.2.1 | 1 of 1See more | 663 |
| adeptia-automate-mcpadeptia-automate-mcp | 1.0.0 | 1 of 2See more | 4,485 |
| linkwardenadnoctemVerified publisher | 0.5.1 | 1 of 2See more | 5,027 |
| outlineadnoctemVerified publisher | 0.1.3 | 1 of 1See more | 1,641 |
| openapiassist-iot-open-api-management | 0.2.2 | 1 of 6See more | 92,164 |
| opendistro-esbeeinventor | 1.15.1 | 1 of 3See more | 6,103 |
| openclawcabrera-evil-chartsVerified publisher | 0.1.1 | 1 of 1See more | 2,268 |
| ghostchart-ghost | 0.1.7 | 1 of 2See more | 1,253 |
| wazuhcsic-charts | 0.1.0 | 1 of 4See more | 16,319 |
| dial-admindialVerified publisher | 0.20.0 | 1 of 3See more | 3,715 |
| adventurelogdjjudas21Verified publisher | 0.1.2 | 1 of 3See more | 10,675 |
| openclaweasy-openclaw | 0.1.0 | 1 of 1See more | 2,205 |
| hedgedocernail-hedgedoc | 5.0.0 | 1 of 1See more | 2,262 |
| canary-checkerflanksourceVerified publisher | 1.2.0 | 1 of 2See more | 5,575 |
Container images carrying it
97 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| opensearchproject/ | 4bdb8ded547c | dompurify | 3.4.17 | 3 |
| requarks/ | fffff288a52f | dompurify | 3.4.17 | 3 |
| ghcr.io/ | a4a3639899f7 | dompurify | 3.4.17 | 3 |
| amazon/ | c740d7a89475 | dompurify | 3.4.17 | 2 |
| governify/ | 2987672448c7 | dompurify | 3.4.17 | 2 |
| graviteeio/ | 32440f832842 | dompurify | 3.4.17 | 2 |
| infisical/ | dbc5be2079b6 | dompurify | 3.4.17 | 2 |
| library/ | 00032f157262 | dompurify | 3.4.17 | 2 |
| opensearchproject/ | 39695180364b | dompurify | 3.4.17 | 2 |
| outlinewiki/ | d060dcd8f9aa | dompurify | 3.4.17 | 2 |
| patrikx3/ | f19eb45b0694 | dompurify | 3.4.17 | 2 |
| ghcr.io/ | 7dbff0fe5f53 | dompurify | 3.4.17 | 2 |
| quay.io/ | cd66986a2a49 | dompurify | 3.4.17 | 2 |
| adeptiainc/ | 31f295e948e6 | dompurify | 3.4.17 | 1 |
| appwrite/ | b16ee4e5c19c | dompurify | 3.4.17 | 1 |
| archivebox/ | d4720d86c0e9 | dompurify | 3.4.17 | 1 |
| assistiot/ | 2297b4350211 | dompurify | 3.4.17 | 1 |
| assistiot/ | f11d82defc70 | dompurify | 3.4.17 | 1 |
| betterdb/ | c4910692b3fc | dompurify | 3.4.17 | 1 |
| devopsiaci/ | b295edf28f1c | dompurify | 3.4.17 | 1 |
| docmost/ | b56947fcfd08 | dompurify | 3.4.17 | 1 |
| epam/ | 7bceacad3de2 | dompurify | 3.4.17 | 1 |
| flanksource/ | 764c84e550db | dompurify | 3.4.17 | 1 |
| flanksource/ | 2bb089c79fc0 | dompurify | 3.4.17 | 1 |
| flanksource/ | 8d17f0c08b20 | dompurify | 3.4.17 | 1 |
| fosrl/ | c32ad797ab96 | dompurify | 3.4.17 | 1 |
| helmforge/ | 5a6c2c449840 | dompurify | 3.4.17 | 1 |
| hkotel/ | 3c04c0e85039 | dompurify | 3.4.17 | 1 |
| infisical/ | bb8352b71cea | dompurify | 3.4.17 | 1 |
| joplin/ | 52af57880c0e | dompurify | 3.4.17 | 1 |
| kyso/ | e52595c5c16f | dompurify | 3.4.17 | 1 |
| library/ | 832e02b53466 | dompurify | 3.4.17 | 1 |
| library/ | 1ef2e532ca4d | dompurify | 3.4.17 | 1 |
| library/ | 2654b1e90413 | dompurify | 3.4.17 | 1 |
| library/ | 29773d6be407 | dompurify | 3.4.17 | 1 |
| library/ | 8e07c5ec63d9 | dompurify | 3.4.17 | 1 |
| library/ | c0d83a8d4522 | dompurify | 3.4.17 | 1 |
| library/ | db4c56c196d6 | dompurify | 3.4.17 | 1 |
| library/ | 4116dd6a5838 | dompurify | 3.4.17 | 1 |
| maildev/ | 180ef51f65ee | dompurify | 3.4.17 | 1 |
| makeplane/ | c4a6236c4080 | dompurify | 3.4.17 | 1 |
| nightscout/ | 00c3b4833f1b | dompurify | 3.4.17 | 1 |
| nightscout/ | ad29ca7a4de6 | dompurify | 3.4.17 | 1 |
| nightscout/ | f604dc4c03ca | dompurify | 3.4.17 | 1 |
| nocodb/ | 27d2fd14670d | dompurify | 3.4.17 | 1 |
| nocodb/ | 6779a4ddedf2 | dompurify | 3.4.17 | 1 |
| nocodb/ | d9516f0bf546 | dompurify | 3.4.17 | 1 |
| oneuptime/ | 63187e1d5121 | dompurify | 3.4.17 | 1 |
| oneuptime/ | 9502ee0cf3f5 | dompurify | 3.4.17 | 1 |
| oneuptime/ | 73130c0cb328 | dompurify | 3.4.17 | 1 |