Lucene search
K

CVE-2025-48050

🗓️ 15 May 2025 00:00:00Reported by mitreType 
cvelist
 cvelist
🔗 www.cve.org👁 10 Views

DOMPurify version 3.2.5 fails to restrict pathname to current working directory, creating security risk.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Carbon design system packages
18 Aug 202519:26
ibm
IBM Security Bulletins
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in dompurify-3.2.4.tgz
20 Sep 202511:16
ibm
IBM Security Bulletins
Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion
11 Sep 202518:18
ibm
IBM Security Bulletins
Security Bulletin: IBM Security QRadar Log Management AQL Plugin includes components with known vulnerabilities
20 Oct 202520:06
ibm
IBM Security Bulletins
Security Bulletin: Multiple Security vulnerabilities affecting IBM Knowledge Catalog Premium Cartridge
11 Mar 202619:05
ibm
IBM Security Bulletins
Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now included (CVE-2025-48050, CVE-2025-43865 and CVE-2025-43864)
28 Jul 202521:10
ibm
IBM Security Bulletins
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0.2
21 Jun 202513:39
ibm
IBM Security Bulletins
Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in dompurify-3.2.5.tgz
22 Oct 202511:02
ibm
IBM Security Bulletins
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in dompurify-3.2.4.tgz
26 Aug 202513:23
ibm
IBM Security Bulletins
Security Bulletin: A vulnerability in DOMPurify may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2025-48050)
1 Sep 202510:16
ibm
Rows per page
[
  {
    "defaultStatus": "unknown",
    "product": "DOMPurify",
    "vendor": "Cure53",
    "versions": [
      {
        "lessThanOrEqual": "3.2.5",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation