Update DOMPurify

[brownemint]

Describe the Problem

My customer uses AppCheck to scan their website on a monthly basis. This month, it flagged 30 CVE's related to the version of DOMPurify that the Elementor plugin is using (DOMPurify 3.3.0).

1. Cure53 Dompurify v3.3.0 - Out of Date Software Version Detected
2. Cure53 DOMPurify 3.x < v3.4.9 - Failure or Bypass of Security Protection Mechanism (CVE-2026-65899)
3. Cure53 DOMPurify < v3.4.0 - Cross-Site Scripting ('XSS') Vulnerability (CVE-2026-65911)
4. Cure53 DOMPurify <= v3.4.6 - Cross-Site Scripting ('XSS') Vulnerability (CVE-2026-65901)
5. Cure53 DOMPurify < v3.4.11 - Stored (Persistent) Cross-Site Scripting ('XSS') Vulnerability (CVE-2026-65898)
6. Cure53 DOMPurify < v3.4.0 - Improper Enforcement of Behavioral Workflow (CVE-2026-65903)
7. Cure53 DOMPurify < v3.4.7 - Trust Boundary Violation Vulnerability (CVE-2026-65902)
8. Cure53 DOMPurify < v3.3.2 - Cross-Site Scripting ('XSS') Vulnerability (CVE-2026-65912)
9. Cure53 DOMPurify < v3.3.2 - DOM-Based Cross-Site Scripting ('XSS') Vulnerability (CVE-2026-65913)
10. Cure53 DOMPurify < v3.3.2 - Cross-Site Scripting ('XSS') Vulnerability (CVE-2026-65914)
11. Cure53 DOMPurify < v3.4.4 - Cross-Site Scripting ('XSS') Vulnerability (CVE-2026-65904)
12. Outdated DOMPurify library detected (CVE-2026-65913)
13. Outdated DOMPurify library detected (CVE-2026-49459)
14. Cure53 DOMPurify < v3.4.12 - Cross-Site Scripting ('XSS') Vulnerability (CVE-2026-66010)
15. Outdated DOMPurify library detected (CVE-2026-65898)
16. Outdated DOMPurify library detected (CVE-2026-65903)
17. Outdated DOMPurify library detected (CVE-2026-49458)
18. Outdated DOMPurify library detected (CVE-2026-41240)
19. Outdated DOMPurify library detected (CVE-2026-65902)
20. Outdated DOMPurify library detected (CVE-2026-65914)
21. Outdated DOMPurify library detected (CVE-2026-41238)
22. Outdated DOMPurify library detected (CVE-2026-65912)
23. Outdated DOMPurify library detected (CVE-2026-75838)
24. Outdated DOMPurify library detected (CVE-2026-65899)
25. Outdated DOMPurify library detected (CVE-2026-41239)
26. Outdated DOMPurify library detected (CVE-2026-49978)
27. Outdated DOMPurify library detected (CVE-2026-65900)
28. Outdated DOMPurify library detected (CVE-2026-65901)
29. Outdated DOMPurify library detected (CVE-2026-66010)
30. Outdated DOMPurify library detected (CVE-2026-0540)

Are there plans to update to the latest stable version?

Propose a Solution

Update DOMPurify

Additional Context

No response

Agreement

• I confirm I have read and followed all the guidelines and instructions outlined in the Feature Request form.
• I agree that my discussion may be closed without further action if it doesn't meet all the requirements outlined in the Feature Request form.