Skip to content

fix: override DOMPurify to patched version - #778

Draft
sbouchet wants to merge 3 commits into
che-incubator:mainfrom
sbouchet:CVE-2026-49978
Draft

fix: override DOMPurify to patched version#778
sbouchet wants to merge 3 commits into
che-incubator:mainfrom
sbouchet:CVE-2026-49978

Conversation

@sbouchet

@sbouchet sbouchet commented Jul 30, 2026

Copy link
Copy Markdown
Collaborator

What does this PR do?

This PR fixes CVE-2026-49978

DOMPurify version is updated to 3.4.12

What issues does this PR fix?

https://redhat.atlassian.net/browse/CRW-11874

How to test this PR?

Does this PR contain changes that override default upstream Code-OSS behavior?

  • the PR contains changes in the code folder (you can skip it if your changes are placed in a che extension )
  • the corresponding items were added to the CHANGELOG.md file
  • rules for automatic git rebase were added to the .rebase folder

sbouchet and others added 2 commits July 30, 2026 11:08
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>
@github-actions

github-actions Bot commented Jul 30, 2026

Copy link
Copy Markdown
Contributor

Click here to review and test in web IDE: Contribute

Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>
@github-actions

Copy link
Copy Markdown
Contributor

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant