From 5232e7ae3187e344c52c7254a85a6e8bcc5693a3 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 30 Jun 2026 17:16:51 -0400
Subject: [PATCH 1/2] Add DOMPurify cross-realm fixed references

---
 .../GHSA-hpcv-96wg-7vj8/GHSA-hpcv-96wg-7vj8.json   | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2026/06/GHSA-hpcv-96wg-7vj8/GHSA-hpcv-96wg-7vj8.json b/advisories/github-reviewed/2026/06/GHSA-hpcv-96wg-7vj8/GHSA-hpcv-96wg-7vj8.json
index 4062c4bebd390..d61430e3998e1 100644
--- a/advisories/github-reviewed/2026/06/GHSA-hpcv-96wg-7vj8/GHSA-hpcv-96wg-7vj8.json
+++ b/advisories/github-reviewed/2026/06/GHSA-hpcv-96wg-7vj8/GHSA-hpcv-96wg-7vj8.json
@@ -46,6 +46,18 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/cure53/DOMPurify"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.6"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/cure53/DOMPurify/tree/3.4.6"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://www.npmjs.com/package/dompurify/v/3.4.6"
     }
   ],
   "database_specific": {
@@ -59,4 +71,4 @@
     "github_reviewed_at": "2026-06-15T19:56:35Z",
     "nvd_published_at": null
   }
-}
\ No newline at end of file
+}

From 11d8f9d8788c83686f72a1a27ff2b23d427dee89 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Tue, 7 Jul 2026 19:37:21 -0400
Subject: [PATCH 2/2] Classify DOMPurify source tag reference as web

---
 .../2026/06/GHSA-hpcv-96wg-7vj8/GHSA-hpcv-96wg-7vj8.json        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2026/06/GHSA-hpcv-96wg-7vj8/GHSA-hpcv-96wg-7vj8.json b/advisories/github-reviewed/2026/06/GHSA-hpcv-96wg-7vj8/GHSA-hpcv-96wg-7vj8.json
index d61430e3998e1..c3876d977dc77 100644
--- a/advisories/github-reviewed/2026/06/GHSA-hpcv-96wg-7vj8/GHSA-hpcv-96wg-7vj8.json
+++ b/advisories/github-reviewed/2026/06/GHSA-hpcv-96wg-7vj8/GHSA-hpcv-96wg-7vj8.json
@@ -52,7 +52,7 @@
       "url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.6"
     },
     {
-      "type": "PACKAGE",
+      "type": "WEB",
       "url": "https://github.com/cure53/DOMPurify/tree/3.4.6"
     },
     {