Vulnerabilities in cure53
32 resultsCVE-2025-15599MEDIUMDOMPurify XSS via Textarea Rawtext Bypass in SAFE_FOR_XMLEPSS 0.3%CVE-2026-65901MEDIUMDOMPurify 3.4.6 Cross-Site Scripting via IN_PLACE nodeNameEPSS 0.3%CVE-2026-41238MEDIUMDOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING FallbackEPSS 0.3%CVE-2026-65904LOWDOMPurify through 3.3.3 Cross-Site Scripting via IN_PLACE modeEPSS 0.3%CVE-2026-109345MEDIUMDOMPurify before 3.4.16 XSS via IN_PLACE Returned Rawtext RootEPSS 0.3%CVE-2026-41239MEDIUMDOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM modeEPSS 0.2%CVE-2026-116802MEDIUMDOMPurify before 3.4.17 XSS via SMIL attributeName Guard Bypass in XHTML ModeEPSS 0.2%CVE-2026-66010MEDIUMDOMPurify before 3.4.12 Hook Bypass via CUSTOM_ELEMENT_HANDLINGEPSS 0.2%CVE-2026-65898MEDIUMDOMPurify before 3.4.11 Permanent Attribute Allowlist Pollution via setConfigEPSS 0.2%CVE-2026-109344MEDIUMDOMPurify from 3.4.13 before 3.4.16 DOM XSS via IN_PLACE afterSanitize HooksEPSS 0.2%CVE-2026-116804MEDIUMDOMPurify from 3.4.4 before 3.4.17 SAFE_FOR_TEMPLATES Bypass via Shadow Root ContentEPSS 0.2%CVE-2026-116803MEDIUMDOMPurify before 3.4.17 DOM XSS via IN_PLACE Hook-Detached SubtreesEPSS 0.2%