GHSA-mrv2-3pqr-j5jr
HighAdvisory
Published 22 Oct 2026In the index since 23 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.6
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 111
- of 18,232 indexed, latest versions
- Container images
- 97
- deployed by those charts
- Fix available
- 1 of 1
- affected package
DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)
Carried by container images the latest versions of 111 of 18,232 indexed charts deploy, on 97 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| dompurifynpm | 1.0.11, 2.1.1, 2.2.6, 2.2.7+34 more | 3.4.17 | 97 |
- OSV records
- GHSA-mrv2-3pqr-j5jr
Charts affected
111 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| excalidashunxwaresVerified publisher | 2026.10.1 | 1 of 2See more | 594 |
| kenerunxwaresVerified publisher | 2026.10.1 | 1 of 2See more | 1,989 |
| twenty-crmvictorlane | 0.0.1 | 1 of 3See more | 72,635 |
| wazuhwazuh-helm-eksVerified publisher | 1.2.10 | 1 of 6See more | 7,539 |
| opensearch-dashboardswener | 3.9.0 | 1 of 1See more | 408 |
| wikiwener | 2.2.0 | 1 of 2See more | 2,652 |
| opensearch-dashboardswenerme | 3.9.0 | 1 of 1See more | 408 |
| wikiwikijs | 3.0.0 | 1 of 2See more | 4,389 |
| kibanawiremindVerified publisher | 8.5.24 | 1 of 2See more | 1,757 |
| opendistro-eswitcom-gmbh | 1.13.3 | 1 of 3See more | 6,103 |
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 1 of 10See more | 14,060 |
Container images carrying it
97 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| opensearchproject/ | 4bdb8ded547c | dompurify | 3.4.17 | 3 |
| requarks/ | fffff288a52f | dompurify | 3.4.17 | 3 |
| ghcr.io/ | a4a3639899f7 | dompurify | 3.4.17 | 3 |
| amazon/ | c740d7a89475 | dompurify | 3.4.17 | 2 |
| governify/ | 2987672448c7 | dompurify | 3.4.17 | 2 |
| graviteeio/ | 32440f832842 | dompurify | 3.4.17 | 2 |
| infisical/ | dbc5be2079b6 | dompurify | 3.4.17 | 2 |
| library/ | 00032f157262 | dompurify | 3.4.17 | 2 |
| opensearchproject/ | 39695180364b | dompurify | 3.4.17 | 2 |
| outlinewiki/ | d060dcd8f9aa | dompurify | 3.4.17 | 2 |
| patrikx3/ | f19eb45b0694 | dompurify | 3.4.17 | 2 |
| ghcr.io/ | 7dbff0fe5f53 | dompurify | 3.4.17 | 2 |
| quay.io/ | cd66986a2a49 | dompurify | 3.4.17 | 2 |
| adeptiainc/ | 31f295e948e6 | dompurify | 3.4.17 | 1 |
| appwrite/ | b16ee4e5c19c | dompurify | 3.4.17 | 1 |
| archivebox/ | d4720d86c0e9 | dompurify | 3.4.17 | 1 |
| assistiot/ | 2297b4350211 | dompurify | 3.4.17 | 1 |
| assistiot/ | f11d82defc70 | dompurify | 3.4.17 | 1 |
| betterdb/ | c4910692b3fc | dompurify | 3.4.17 | 1 |
| devopsiaci/ | b295edf28f1c | dompurify | 3.4.17 | 1 |
| docmost/ | b56947fcfd08 | dompurify | 3.4.17 | 1 |
| epam/ | 7bceacad3de2 | dompurify | 3.4.17 | 1 |
| flanksource/ | 764c84e550db | dompurify | 3.4.17 | 1 |
| flanksource/ | 2bb089c79fc0 | dompurify | 3.4.17 | 1 |
| flanksource/ | 8d17f0c08b20 | dompurify | 3.4.17 | 1 |
| fosrl/ | c32ad797ab96 | dompurify | 3.4.17 | 1 |
| helmforge/ | 5a6c2c449840 | dompurify | 3.4.17 | 1 |
| hkotel/ | 3c04c0e85039 | dompurify | 3.4.17 | 1 |
| infisical/ | bb8352b71cea | dompurify | 3.4.17 | 1 |
| joplin/ | 52af57880c0e | dompurify | 3.4.17 | 1 |
| kyso/ | e52595c5c16f | dompurify | 3.4.17 | 1 |
| library/ | 832e02b53466 | dompurify | 3.4.17 | 1 |
| library/ | 1ef2e532ca4d | dompurify | 3.4.17 | 1 |
| library/ | 2654b1e90413 | dompurify | 3.4.17 | 1 |
| library/ | 29773d6be407 | dompurify | 3.4.17 | 1 |
| library/ | 8e07c5ec63d9 | dompurify | 3.4.17 | 1 |
| library/ | c0d83a8d4522 | dompurify | 3.4.17 | 1 |
| library/ | db4c56c196d6 | dompurify | 3.4.17 | 1 |
| library/ | 4116dd6a5838 | dompurify | 3.4.17 | 1 |
| maildev/ | 180ef51f65ee | dompurify | 3.4.17 | 1 |
| makeplane/ | c4a6236c4080 | dompurify | 3.4.17 | 1 |
| nightscout/ | 00c3b4833f1b | dompurify | 3.4.17 | 1 |
| nightscout/ | ad29ca7a4de6 | dompurify | 3.4.17 | 1 |
| nightscout/ | f604dc4c03ca | dompurify | 3.4.17 | 1 |
| nocodb/ | 27d2fd14670d | dompurify | 3.4.17 | 1 |
| nocodb/ | 6779a4ddedf2 | dompurify | 3.4.17 | 1 |
| nocodb/ | d9516f0bf546 | dompurify | 3.4.17 | 1 |
| oneuptime/ | 63187e1d5121 | dompurify | 3.4.17 | 1 |
| oneuptime/ | 9502ee0cf3f5 | dompurify | 3.4.17 | 1 |
| oneuptime/ | 73130c0cb328 | dompurify | 3.4.17 | 1 |