request #47694 dompurify 3.4.10 -> 3.4.11

Infos

Artifact ID#47694

Submitted byKevin Traini (ktraini)

Last Modified On2026-06-22 10:39

Submitted on2026-06-22 08:56

Rank49435

Details

Summary *

dompurify 3.4.10 -> 3.4.11

Original Submission

Fix GHSA-cmwh-pvxp-8882

No impact for Tuleap. We do not use ALLOWED_ATTR config

Release note: https://github.com/cure53/DOMPurify/releases/tag/3.4.11

CategoryDependencies

Reported in versionEmpty

PlatformEmpty

Is an Enhancement or an internal improvement?

[ ] enhancement
[ ] internal improvement

CC listEmpty

Stage

Assigned toKevin Traini (ktraini)

StatusClosed

Close date2026-06-22

Attachments

AttachmentsEmpty

References

Cross references

Show items referenced by request #47694

Referenced by request #47694

Artifact

rel #47138 17.6

Other

gerrit #38148

Follow-ups

Thomas Gerbet (tgerbet)

2026-06-22 10:39

Connected artifacts
- Added Fixed in: rel #47138

Tracker Workflow Manager (forge__tracker_workflow_manager)

2026-06-22 10:37

Closed by @ktraini with git #tuleap/tuleap/0195cd68373da2466979cfeadeef4f3935fc1c05.

Status changed from Under review to Closed
Close date set to 2026-06-22

Kevin Traini (ktraini)

2026-06-22 08:58

See gerrit #38148

Status changed from Under implementation to Under review

Public

Referenced by request #47694

Artifact

Other

Follow-ups