C
Vendor security profile
cure53
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs20
Critical0
CISA KEV0
Public exploit16
Patch rate%35
Avg. CVSS5.8
12-month vulnerability rate
0
0
0
0
1
0
0
0
16
1
0
2
CVE KEV
CVE severity distribution
20toplam CVE
High2 (10%)
Medium18 (90%)
Patch and exploitation view
%35
Verified patch
%0
CISA KEV
%80
Public exploit
7Patch available
0Partial
0Workaround
0Vendor: no patch
13Unknown
Latest vulnerabilities
5.1
CVE-2026-109345
DOMPurify before 3.4.16 XSS via IN_PLACE Returned Rawtext Root
C
Patch status unknownEPSS %0
5.1
CVE-2026-109344
DOMPurify from 3.4.13 before 3.4.16 DOM XSS via IN_PLACE afterSanitize Hooks
C
Patch status unknownEPSS %0
5.1
CVE-2026-75838
DOMPurify before 3.4.13 Cross-Site Scripting via IN_PLACE hook
C
Patch status unknownEPSS %0
5.1
CVE-2026-66010
DOMPurify before 3.4.12 Hook Bypass via CUSTOM_ELEMENT_HANDLING
C
Patch status unknownEPSS %0
5.1
CVE-2026-65913
DOMPurify before 3.3.2 Prototype Pollution via USE_PROFILES
C
Patch status unknownEPSS %0
5.1
CVE-2026-65899
DOMPurify before 3.4.9 Trusted Types Policy State Contamination
C
Patch verifiedEPSS %0
6.1
CVE-2026-65914
Cross-site scripting in Cure53 Dompurify
C
Patch status unknownEPSS %0
6.1
CVE-2026-65912
Cross-site scripting in Cure53 Dompurify
C
Patch status unknownEPSS %0
6.1
CVE-2026-65911
Cross-site scripting in Cure53 Dompurify
C
Patch status unknownEPSS %0
4.7
CVE-2026-65904
Vulnerability in Cure53 Dompurify
C
Patch status unknownEPSS %0