{"action":"Upgrade dompurify to 3.4.5 or later.","affected":[{"fixed":"3.4.5","introduced":"3.4.4"}],"component":"dompurify","cve_ids":["CVE-2026-47423"],"ecosystem":"npm","epss":0.0041,"exploited":false,"fixed_versions":["3.4.5"],"ghsa_id":"GHSA-87xg-pxx2-7hvx","id":"tcs_01M5KFC6DGT6NCXJ6YX0BGVFZ4","modified_at":"2026-06-01T14:26:26.946773Z","published_at":"2026-06-01T14:07:29Z","references":["https://osv.dev/vulnerability/GHSA-87xg-pxx2-7hvx","https://github.com/cure53/DOMPurify/security/advisories/GHSA-87xg-pxx2-7hvx","https://github.com/cure53/DOMPurify"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-87xg-pxx2-7hvx","url":"https://osv.dev/vulnerability/GHSA-87xg-pxx2-7hvx"}],"summary":"DOMPurify XSS via selectedcontent re-clone"}