Linux Distros Unpatched Vulnerability : CVE-2026-65899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types policy when clearConfig is called, so a DOMPurify instance reused across trust boundaries...

CVE-2026-65899 vulnerabilities

Vulnerabilities for packages: kibana, langfuse, librechat, wazuh-dashboard-fips, opensearch-dashboards, langfuse-fips, wazuh-dashboard, nextcloud-server...

CVE-2026-65899

creationtimestamp| type| source ---|---|--- 2026-07-23 14:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vxr8-fq34-vvx9...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2433 more potentially affected by CVE-2026-65899 via dompurify (>=3.0.0, <=3.4.8)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.0.1, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: CVE-2026-65899 Source advisory: OSV:GHSA-VXR8-FQ34-VVX9...