WhisperX tag archive

#mXSS

This page collects WhisperX intelligence signals tagged #mXSS. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (1)

The Lab · 2026-03-28 13:27:06 · GitHub Issues

1. DOMPurify Security Update: Critical mXSS Vulnerability in HTML Sanitizer (GHSA-h8r8-wccr-v5f2)

A critical mutation-XSS (mXSS) vulnerability has been confirmed in the widely-used DOMPurify HTML sanitization library, tracked as GHSA-h8r8-wccr-v5f2. This security flaw allows malicious payloads to bypass sanitization and execute when sanitized HTML is reinserted into a new parsing context using `innerHTML`. The vuln...