{"id":"CLSA-2026-1792929570","summary":"TuxCare security update for dompurify (2 CVEs)","details":"TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 2.3.10-tuxcare.4.","modified":"2026-10-27T01:58:01.976059401Z","published":"2026-10-25T11:59:30Z","upstream":["GHSA-c6gr-qvv4-5v3f","GHSA-mrv2-3pqr-j5jr"],"affected":[{"package":{"name":"dompurify","ecosystem":"TuxCare:npm","purl":"pkg:npm/dompurify"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.10-tuxcare.0"},{"fixed":"2.3.10-tuxcare.4"}]}],"versions":["2.3.10","2.3.10-tuxcare.1","2.3.10-tuxcare.2","2.3.10-tuxcare.3"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1792929570.json","tuxcare":{"base_version":"2.3.10","fixed_version":"2.3.10-tuxcare.4"}}}],"schema_version":"1.9.0"}