CVE-2026-65913 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, wazuh-dashboard...

CVE-2026-65913

creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cj63-jhhr-wcxv...

CVE-2026-65913 DOMPurify before 3.3.2 Prototype Pollution via USE_PROFILES

DOMPurify before 3.3.2 contains a prototype pollution vulnerability in USEPROFILES mode that allows attackers to bypass attribute filtering by polluting Array.prototype properties. Attackers can set Array.prototype properties like onclick to true, causing DOMPurify to accept event handlers as...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2081 more potentially affected by CVE-2026-65913 via dompurify (>=3.0.0, <=3.3.1)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.3.0, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.2 and more Source cves: CVE-2026-65913 Source advisory: OSV:GHSA-CJ63-JHHR-WCXV...