CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

207093 matches found

OSV•added last week•8 views

DEBIAN-CVE-2026-65898

DOMPurify before 3.4.11 fails to clone the ALLOWEDATTR allowlist when setConfig is used with an uponSanitizeAttribute hook, allowing the hook to permanently mutate the shared allowlist. Attackers can register a hook that conditionally allows dangerous attributes like onerror for trusted elements,...

5.1CVSS5.8AI score0.00167EPSS

SaveExploits1References1

OSV•added last week•4 views

UBUNTU-CVE-2026-65913

DOMPurify before 3.3.2 contains a prototype pollution vulnerability in USEPROFILES mode that allows attackers to bypass attribute filtering by polluting Array.prototype properties. Attackers can set Array.prototype properties like onclick to true, causing DOMPurify to accept event handlers as...

6.1CVSS5.8AI score0.00185EPSS

SaveExploits0References3

OSV•added last week•2 views

UBUNTU-CVE-2026-65898

7.2CVSS5.8AI score0.00167EPSS

SaveExploits1References3

OSV•added last week•3 views

UBUNTU-CVE-2026-65914

DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like script, xmp, iframe, noembed, noframes, or noscript. Attackers can craft payloads with closing sequences that break out of the wrapper...

5.3CVSS6AI score0.00166EPSS

SaveExploits1References3

OSV•added last week•6 views

UBUNTU-CVE-2026-65899

DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types policy when clearConfig is called, so a DOMPurify instance reused across trust boundaries stays bound to a previously supplied TRUSTEDTYPESPOLICY. A later caller that requests RETURNTRUSTEDTYPE output receives a TrustedHTML...

6.1CVSS6AI score0.00231EPSS

SaveExploits1References3

OSV•added last week•7 views

MINI-6XGR-R5H8-JVRC