Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-24T12:07:57 dompurify: DOMPurify: Cross-Site Scripting (XSS) via custom element attribute bypass 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CWE-79

DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOM_ELEMENT_HANDLING.tagNameCheck, allowing attributes to bypass application security policies. Attackers can preserve sensitive attributes on custom elements that later re-inject them into innerHTML sinks, creating second-order XSS gadgets.

A flaw was found in DOMPurify. This vulnerability allows attackers to bypass application security policies by preserving sensitive attributes on custom elements. These attributes can then be re-injected into web page content, leading to Cross-Site Scripting (XSS) attacks. An attacker could exploit this to execute malicious scripts in a user's browser, potentially leading to information disclosure or unauthorized actions.

This Moderate-impact flaw in DOMPurify allows for Cross-Site Scripting (XSS) attacks by enabling the bypass of sanitization policies for custom elements. An attacker could exploit this by crafting malicious content that, when processed by affected Red Hat products utilizing DOMPurify in their web interfaces, could lead to the execution of arbitrary client-side scripts. This could result in information disclosure or unauthorized actions within the user's browser session. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Cryostat 4 Under investigation cryostat-openshift-console-plugin-npm Cryostat 4 Under investigation dompurify Cryostat 4 Under investigation grafana-infinity-datasource-npm Migration Toolkit for Virtualization Fix deferred migration-toolkit-virtualization/mtv-console-plugin-rhel9 Multicluster Engine for Kubernetes Fix deferred multicluster-engine/console-mce-rhel9 Node HealthCheck Operator Fix deferred workload-availability/node-healthcheck-must-gather-rhel9 Node HealthCheck Operator Fix deferred workload-availability/node-healthcheck-operator-bundle Node HealthCheck Operator Fix deferred workload-availability/node-healthcheck-rhel9-operator OpenShift Lightspeed Fix deferred openshift-lightspeed/lightspeed-agentic-console-rhel9 OpenShift Lightspeed Fix deferred openshift-lightspeed/lightspeed-console-plugin-419-rhel9 OpenShift Lightspeed Fix deferred openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9 OpenShift Lightspeed Fix deferred openshift-lightspeed/lightspeed-console-plugin-rhel9 OpenShift Service Mesh 3 Fix deferred openshift-service-mesh/kiali-ossmc-rhel9 OpenShift Service Mesh 3 Fix deferred openshift-service-mesh/kiali-rhel9 Red Hat 3scale API Management Platform 2 Under investigation 3scale-amp21/system Red Hat 3scale API Management Platform 2 Under investigation 3scale-amp22/system Red Hat 3scale API Management Platform 2 Under investigation 3scale-amp2/system-rhel7 Red Hat 3scale API Management Platform 2 Under investigation 3scale-amp2/system-rhel8 Red Hat 3scale API Management Platform 2 Under investigation 3scale-amp2/system-rhel9 Red Hat Advanced Cluster Management for Kubernetes 2 Fix deferred rhacm2/console-rhel9 Red Hat Advanced Cluster Security 4 Fix deferred advanced-cluster-security/rhacs-main-rhel8 Red Hat Advanced Cluster Security 4 Fix deferred advanced-cluster-security/rhacs-main-rhel9 Red Hat AMQ Broker 7 Under investigation dompurify Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/gateway-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/gateway-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred automation-controller Red Hat Ansible Automation Platform 2 Fix deferred automation-eda-controller Red Hat Ansible Automation Platform 2 Fix deferred automation-gateway Red Hat Ansible Automation Platform 2 Fix deferred automation-platform-ui Red Hat build of Apache Camel for Spring Boot 4 Under investigation dompurify Red Hat build of Apache Camel - HawtIO 4 Under investigation dompurify Red Hat build of Apicurio Registry 3 Under investigation apicurio/apicurio-registry-ui-rhel8 Red Hat build of Apicurio Registry 3 Under investigation apicurio/apicurio-registry-ui-rhel9 Red Hat Build of Podman Desktop Under investigation rh-podman-desktop.git Red Hat Ceph Storage 9 Under investigation rhceph/alloy-rhel10 Red Hat Data Grid 8 Under investigation dompurify Red Hat Developer Hub Under investigation rhdh/rhdh-hub-rhel9 Red Hat Enterprise Linux 10 Fix deferred ceph Red Hat Enterprise Linux 10 Fix deferred cockpit-image-builder Red Hat Enterprise Linux 10 Fix deferred grafana Red Hat Enterprise Linux 10 Fix deferred grafana-pcp Red Hat Enterprise Linux 8 Fix deferred grafana Red Hat Enterprise Linux 9 Fix deferred grafana Red Hat Hardened Images Not affected ruff Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-dashboard-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-automl-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-autorag-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-eval-hub-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-gen-ai-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-maas-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-mlflow-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-model-registry-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-agent-installer-ui-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-console Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-console-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-monitoring-plugin-rhel8 Red Hat OpenShift Container Platform 4 Fix deferred openshift4/ose-monitoring-plugin-rhel9 Red Hat Openshift Data Foundation 4 Under investigation odf4/ocs-client-console-rhel9 Red Hat Openshift Data Foundation 4 Under investigation odf4/odf-console-rhel9 Red Hat Openshift Data Foundation 4 Under investigation odf4/odf-multicluster-console-rhel9 Red Hat OpenShift Dev Spaces Under investigation devspaces/code-rhel9 Red Hat OpenShift Dev Spaces Under investigation devspaces/openvsx-rhel9 Red Hat OpenShift GitOps Under investigation openshift-gitops-1/argocd-rhel8 Red Hat OpenShift GitOps Under investigation openshift-gitops-1/argocd-rhel9 Red Hat OpenShift Virtualization 4 Fix deferred container-native-virtualization/kubevirt-console-plugin Red Hat OpenShift Virtualization 4 Fix deferred container-native-virtualization/kubevirt-console-plugin-rhel9 Self-service automation portal 2 Fix deferred ansible-automation-platform/automation-portal streams for Apache Kafka 2 Under investigation dompurify streams for Apache Kafka 3 Under investigation dompurify https://www.cve.org/CVERecord?id=CVE-2026-66010 https://nvd.nist.gov/vuln/detail/CVE-2026-66010 https://github.com/cure53/DOMPurify/security/advisories/GHSA-c2j3-45gr-mqc4 https://www.vulncheck.com/advisories/dompurify-before-hook-bypass-via-custom-element-handling