UBUNTU-CVE-2026-65899

DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types...

UBUNTU-CVE-2026-65913

DOMPurify before 3.3.2 contains a prototype pollution vulnerability in...

CVE-2026-65900

DOMPurify versions =3.0.0 and before 3.4.8, when configured with SAFEFORTEMPLATES together with a DOM output mode RETURNDOM, RETURNDOMFRAGMENT, or INPLACE, fail to strip template expressions e.g. $evil, evil, inside element content. The final normalization/scrub pass scrubTemplateExpressions uses...

ROOT-APP-NPM-CVE-2026-41239 CVE-2026-41239 in @rootio/dompurify - Patched by Root

Root has patched CVE-2026-41239 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-49978 CVE-2026-49978 in @rootio/dompurify - Patched by Root

Root has patched CVE-2026-49978 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-15599 CVE-2025-15599 in @rootio/dompurify - Patched by Root

Root has patched CVE-2025-15599 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-VXR8-FQ34-VVX9 GHSA-vxr8-fq34-vvx9 in @rootio/dompurify - Patched by Root

Root has patched GHSA-vxr8-fq34-vvx9 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...

CVE-2026-49458

creationtimestamp| type| source ---|---|--- 2026-05-26 16:03:01+00:00| published-proof-of-concept| https://github.com/cure53/DOMPurify/security/advisories/GHSA-hpcv-96wg-7vj8 2026-07-27 04:02:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlz7oozws2o 2026-07-27...

Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the DOMPurify library

Summary Due to the use of the DOMPurify library, DevOps Test Performance and Rational Performance Tester contain a cross-site scripting XSS vulnerability CVE-2025-15599, CVE-2026-0540 Vulnerability Details CVEID:CVE-2025-15599 DESCRIPTION: DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8...