[ Vendor · 4 CVEs ]
cure53
CVEs affecting cure53 published in the last 30 days, plus any cure53 CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109344 | 12 Oct 2026 | CVSS 6.1 | cure53 DOMPurifyDOMPurify from 3.4.13 before 3.4.16 contains a cross-site scripting vulnerability because IN_PLACE mode fails to neutralize subtrees detached by… | |
| CVE-2026-109345 | 12 Oct 2026 | CVSS 6.1 | cure53 DOMPurifyDOMPurify before 3.4.16 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization because IN_PLACE mode returns a… | |
| CVE-2026-75838 | 18 Aug 2026 | CVSS 5.1 | cure53 DOMPurifyDOMPurify before 3.4.13 contains a cross-site scripting vulnerability in IN_PLACE sanitization where element-removal hooks fail to neutralize… | |
| CVE-2026-41239 | 23 Apr 2026 | CVSS 6.8 | cure53 DOMPurifyDOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Starting in version 1.0.10 and prior to version 3.4.0… |