[Pkg-javascript-devel] Bug#1142688: notfound 1142688 in node-dompurify/3.4.12+dfsg-1, closing 1142688

[Salvatore Bonaccorso]

Hi,

On Fri, Jul 24, 2026 at 10:00:54AM +0200, Xavier Guimard wrote:
> notfound 1142688 node-dompurify/3.4.12+dfsg-1
> close 1142688 3.4.12+dfsg-1
> thanks
> 
> Following https://github.com/cure53/DOMPurify/security/advisories/GHSA-x4vx-rjvf-j5p4
> and "npm audit", CVE is for node-dompurify <= 3.4.6

Okay since we do not have anything better (e.g. a fixing commit here),
let's trust the upstream GHSA fixed in note. The issue is fairly low
and will be marked no-dsa.

Regards,
Salvatore