Caverav

**Name of the Vulnerable Software and Affected Versions** DOMPurify versions prior to 3.3.2 **Description** A mutation-XSS (Cross-Site Scripting) issue occurs when sanitized HTML is reinserted into special parsing contexts using `innerHTML` with wrappers such as `script`, `xmp`, `iframe`, `noembed`, `noframes`, or `noscript`. Attackers can use closing sequences to break out of the wrapper context during reparsing, which reactivates dangerous markup containing event handlers to execute arbitrary JavaScript. **Recommendations** Update to version 3.3.2 or later.