GHSA-6688-9rhm-gjv2: dompurify fixed in 3.4.16

GHSA-6688-9rhm-gjv2 PUBLISHED CVSS 9.300000190734863 CRITICAL

Record from GitHub Advisory Database · Published October 5, 2026

dompurify is fixed in 3.4.16 (npm)

DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
dompurify	npm	3.4.16
nextcloud-server-34	Chainguard	34.0.4-r9
commercial-gitlab-rails-ee-19.4	Chainguard	19.4.1-r1
commercial-gitlab-rails-ee-fips-19.3	Chainguard	19.3.3-r1
tensorflow-gpu-jupyter	Chainguard	2.21.0-r12
wazuh-dashboard-fips	Chainguard	4.14.8-r6
commercial-gitlab-rails-ee-fips-19.2	Chainguard	19.2.7-r1
commercial-gitlab-rails-ee-19.1	Chainguard	19.1.7-r3
awx	Chainguard	24.6.1-r69
commercial-gitlab-rails-ee-fips-19.4	Chainguard	19.4.1-r1
jupyter-base-notebook	Wolfi	7.6.3-r2
opensearch-dashboards-2-fips	Chainguard	2.19.6-r12

6 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

Vendor	Product	Versions
chainguard	nextcloud-server-34	0
chainguard	commercial-gitlab-rails-ee-19.4	0
chainguard	commercial-gitlab-rails-ee-fips-19.3	0
chainguard	tensorflow-gpu-jupyter	0
chainguard	wazuh-dashboard-fips	0
chainguard	commercial-gitlab-rails-ee-fips-19.2	0
chainguard	commercial-gitlab-rails-ee-19.1	0
chainguard	awx	0
npm	dompurify
chainguard	commercial-gitlab-rails-ee-fips-19.4	0
wolfi	jupyter-base-notebook	0
chainguard	opensearch-dashboards-2-fips	0
npm	dompurify	0
chainguard	nextcloud-server-35	0
chainguard	commercial-gitlab-rails-ee-19.3	0
chainguard	commercial-gitlab-rails-ee-19.2	0
chainguard	wazuh-dashboard	0
chainguard	commercial-gitlab-rails-ee-fips-19.1	0
chainguard	opensearch-dashboards-2	0

Timeline

Oct 5, 2026 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-6688-9rhm-gjv2
vulnetix vdb fixes GHSA-6688-9rhm-gjv2

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-6688-9rhm-gjv2/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →