Known vulnerabilities in DOMPurify - page 2

Vendor: Cure53
Software: DOMPurify
Software CPE: cpe:2.3:a:cure53:dompurify:*:*:*:*:*:*:*:*
Total vulnerabilities: 41
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DOMPurify DOMPurify is affected by 41 known vulnerabilities: 1 high, 26 medium, 14 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154191 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
3.4.17 13.10.2026 SB2026101338
#VU154190 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
3.4.17 13.10.2026 SB2026101338
#VU154189 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
3.4.17 13.10.2026 SB2026101338
#VU152599 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-109344
CWE-79 Medium
No
No
3.4.16 28.09.2026 SB20260928329
#VU137373 - Improper Access Control
CVE-2026-65898
CWE-284 Low
No
No
3.4.11 13.07.2026 SB2026071310
#VU137372 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-65900
CWE-79 Medium
No
No
3.4.8 13.07.2026 SB2026071309
SB2026091499
SB20260914100
and 1 more
#VU134420 - Protection Mechanism Failure
CVE-2026-65899
CWE-693 Medium
No
No
3.4.9 12.06.2026 SB2026061217
#VU132386 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-49978
CWE-79 Medium
No
No
3.4.7 27.05.2026 SB2026052785
SB20260731138
SB2026083170
and 2 more
#VU132385 - Improper input validation
CVE-2026-65901
CWE-20 Medium
No
No
3.4.7 27.05.2026 SB2026052785
#VU132356 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-49459
CWE-79 Medium
No
No
3.4.6 27.05.2026 SB2026052729
SB20260919177
SB2026102334
#VU132355 - Improper input validation
CVE-2026-49458
CWE-20 Medium
No
No
3.4.6 27.05.2026 SB2026052729
SB20260919177
SB2026102334
#VU132354 - Trust Boundary Violation
CVE-2026-65902
CWE-501 Medium
No
No
3.4.6 27.05.2026 SB2026052729
#VU126318 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-65913
CWE-1321 Medium
No
No
3.3.2 16.04.2026 SB20260325102
#VU126317 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-65912
CWE-79 Medium
No
No
3.3.2 16.04.2026 SB20260325102
#VU124499 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-3126
CWE-79 Low
No
No
3.3.2 25.03.2026 SB20260325102
#VU49096 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.0.17 19.12.2020 SB2020121918
#VU48814 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.2.3 07.12.2020 SB2020120724
#VU49403 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26870
CWE-79 Medium
No
No
2.0.17 07.10.2020 SB2021011214
SB2021072052
SB2020100725
and 4 more
#VU23938 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.0.3 06.01.2020 SB2019100407
#VU22273 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16728
CWE-79 Low
No
No
2.0.7 24.10.2019 SB2019102414
SB2023033138
SB2024020623


Showing elements 21 - 40 out of 41