Linux Distros Unpatched Vulnerability : CVE-2026-65898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify before 3.4.11 fails to clone the ALLOWEDATTR allowlist when setConfig is used with an uponSanitizeAttribute hook, allowing the hook to permanently...

CVE-2026-65898 vulnerabilities

Vulnerabilities for packages: langfuse-fips, opensearch-dashboards-fips, librechat, nextcloud-server, wazuh-dashboard-fips, langfuse, opensearch-dashboards, kibana, wazuh-dashboard...

CVE-2026-65898

creationtimestamp| type| source ---|---|--- 2026-07-23 14:35:05+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cmwh-pvxp-8882...

UBUNTU-CVE-2026-65898

DOMPurify before 3.4.11 fails to clone the ALLOWEDATTR allowlist when setConfig is used with an uponSanitizeAttribute hook, allowing the hook to permanently mutate the shared allowlist. Attackers can register a hook that conditionally allows dangerous attributes like onerror for trusted elements,...