#1298·trix

Vulnerability in DOMPurify dependency (≤ 3.3.1)

Author: MartinKassarBofCreated Apr 8, 2026Updated Jun 26, 2026

Vulnerability: DOMPurify ≤ 3.3.1 in dependency tree

Our dependency security checks are currently failing due to a reported vulnerability in DOMPurify versions ≤ 3.3.1.

Advisory: https://github.com/cure53/DOMPurify/security/advisories/GHSA-cjmm-f4jc-qw8r

Details

This package depends (directly or indirectly) on a vulnerable version of DOMPurify. This is being flagged by our security tooling and is currently causing our checks to fail.

Impact

This issue is affecting our builds due to failing security checks.

Any updates on this would be appreciated. :)