Cure53 DOMPurify

• CVE-2026-116804 Medium 6.1 DOMPurify from 3.4.4 before 3.4.17 SAFE_FOR_TEMPLATES Bypass via Shadow Root Content 0.2%
• CVE-2026-116803 Medium 6.1 DOMPurify before 3.4.17 DOM XSS via IN_PLACE Hook-Detached Subtrees 0.2%
• CVE-2026-116802 Medium 6.1 DOMPurify before 3.4.17 XSS via SMIL attributeName Guard Bypass in XHTML Mode 0.2%
• CVE-2026-109345 Medium 6.1 DOMPurify before 3.4.16 XSS via IN_PLACE Returned Rawtext Root 0.2%
• CVE-2026-109344 Medium 6.1 DOMPurify from 3.4.13 before 3.4.16 DOM XSS via IN_PLACE afterSanitize Hooks 0.2%
• CVE-2026-75838 Medium 5.1 DOMPurify before 3.4.13 Cross-Site Scripting via IN_PLACE hook 0.4%
• CVE-2026-66010 Medium 6.1 DOMPurify before 3.4.12 Hook Bypass via CUSTOM_ELEMENT_HANDLING 0.2%
• CVE-2026-65914 Medium 5.3 DOMPurify before 3.3.2 Mutation XSS via Re-Contextualization 0.3%
• CVE-2026-65913 Medium 6.1 DOMPurify before 3.3.2 Prototype Pollution via USE_PROFILES 0.3%
• CVE-2026-65912 Medium 6.1 DOMPurify before 3.3.2 URI Validation Bypass via ADD_ATTR 0.3%
• CVE-2026-65911 Medium 6.1 DOMPurify before 3.4.0 XSS via ADD_ATTR/ADD_TAGS State Leakage 0.3%
• CVE-2026-65904 Medium 4.7 DOMPurify through 3.3.3 Cross-Site Scripting via IN_PLACE mode 0.3%
• CVE-2026-65903 Medium 6.1 DOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGS 0.3%
• CVE-2026-65902 Medium 6.1 DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags 0.4%
• CVE-2026-65901 Medium 6.1 DOMPurify 3.4.6 Cross-Site Scripting via IN_PLACE nodeName 0.3%
• CVE-2026-65900 Medium 6.1 DOMPurify before 3.4.8 Template Expression Injection via RETURN_DOM 0.3%
• CVE-2026-65899 Medium 6.1 DOMPurify before 3.4.9 Trusted Types Policy State Contamination 0.4%
• CVE-2026-65898 High 7.2 DOMPurify before 3.4.11 Permanent Attribute Allowlist Pollution via setConfig 0.2%
• CVE-2026-49978 Medium 6.3 DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content 0.4%
• CVE-2026-49459 Medium 6.1 DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM 0.4%
• CVE-2026-49458 Medium 6.1 DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks 0.4%
• CVE-2026-47423 High 8.2 DOMPurify XSS via `selectedcontent` re-clone 0.4%
• CVE-2026-41240 Medium 6.0 DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix) 0.3%
• CVE-2026-41239 Medium 6.8 DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode 0.2%
• CVE-2026-41238 Medium 6.9 DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallback 0.3%
• CVE-2026-0540 Medium 6.1 DOMPurify XSS via Missing Rawtext Elements in SAFE_FOR_XML 0.4%
• CVE-2025-15599 Medium 6.1 DOMPurify XSS via Textarea Rawtext Bypass in SAFE_FOR_XML 0.3%
• CVE-2025-48050 High 7.5 In DOMPurify through 3.2.5 before 6bc6d60, scripts/server.js does not ensure that a pathname is located under the current working directory. NOTE: the Supplier disputes the significance of this report 0.5%
• CVE-2025-26791 Medium 4.5 DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS). 0.6%
• CVE-2024-48910 Critical 9.1 DOMPurify vulnerable to tampering by prototype polution 1.2%
• CVE-2024-47875 Critical 10.0 DOMPurify nesting-based mXSS 1.1%
• CVE-2024-45801 High 7.3 Tampering by prototype polution in DOMPurify 0.9%