cure53

Top products

The 15 most recently published vulnerabilities affecting cure53.

• CVE-2026-66010DOMPurify before 3.4.12 Hook Bypass via CUSTOM_ELEMENT_HANDLING6.1Jul 24, 2026
• CVE-2026-65913DOMPurify before 3.3.2 Prototype Pollution via USE_PROFILES6.1Jul 23, 2026
• CVE-2026-65914DOMPurify before 3.3.2 Mutation XSS via Re-Contextualization6.1Jul 23, 2026
• CVE-2026-65912DOMPurify before 3.3.2 URI Validation Bypass via ADD_ATTR6.1Jul 23, 2026
• CVE-2026-65904DOMPurify through 3.3.3 Cross-Site Scripting via IN_PLACE mode4.7Jul 23, 2026
• CVE-2026-65911DOMPurify before 3.4.0 XSS via ADD_ATTR/ADD_TAGS State Leakage6.1Jul 23, 2026
• CVE-2026-65903DOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGS6.1Jul 23, 2026
• CVE-2026-65902DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags6.1Jul 23, 2026
• CVE-2026-65901DOMPurify 3.4.6 Cross-Site Scripting via IN_PLACE nodeName6.1Jul 23, 2026
• CVE-2026-65900DOMPurify before 3.4.8 Template Expression Injection via RETURN_DOM6.1Jul 23, 2026
• CVE-2026-65899DOMPurify before 3.4.9 Trusted Types Policy State Contamination6.1Jul 23, 2026
• CVE-2026-65898DOMPurify before 3.4.11 Permanent Attribute Allowlist Pollution via setConfig7.2Jul 23, 2026
• CVE-2026-49978DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content6.1Jul 14, 2026
• CVE-2026-49459DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM6.1Jul 14, 2026
• CVE-2026-49458DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks6.1Jul 14, 2026