request #47591 DOMPurify: 3.3.2/3.3.3 -> 3.4.0

Infos

Artifact ID#47591

Submitted byThomas Gerbet (tgerbet)

Last Modified On2026-04-15 11:50

Submitted on2026-04-15 09:04

Rank49318

Details

Summary *

DOMPurify: 3.3.2/3.3.3 -> 3.4.0

Original Submission

Fixes https://github.com/cure53/DOMPurify/security/advisories/GHSA-39q2-94rc-95cp. Tuleap is not impacted, the set of features needed to get the unexpected behavior is not used.

https://github.com/cure53/DOMPurify/releases/tag/3.4.0

CategoryOther

Reported in versionAll

PlatformEmpty

Is an Enhancement or an internal improvement?

[ ] enhancement
[ ] internal improvement

CC listEmpty

Stage

Assigned toThomas Gerbet (tgerbet)

StatusClosed

Close date2026-04-15

Attachments

AttachmentsEmpty

References

Cross references

Show items referenced by request #47591

Referenced by request #47591

Artifact

rel #47138 17.6

Other

gerrit #37441

Follow-ups

Joris MASSON (jmasson)

2026-04-15 11:50

Connected artifacts
- Added Fixed in: rel #47138

Tracker Workflow Manager (forge__tracker_workflow_manager)

2026-04-15 11:50

Closed by @tgerbet with git #tuleap/tuleap/689c950a9f36eb3f80a788f0000b1e6fbd7ce183.

Status changed from Under review to Closed
Close date set to 2026-04-15

Thomas Gerbet (tgerbet)

2026-04-15 09:49

See gerrit #37441.

Status changed from Under implementation to Under review

Public

Referenced by request #47591

Artifact

Other

Follow-ups