cure53 kayıtları
cure53 üreticisine ait 26 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')18
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')2
- CWE-501 Trust Boundary Violation1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-693 Protection Mechanism Failure1
- CWE-697 Incorrect Comparison1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
26 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-48910Kavram kanıtı | DOMPurify vulnerable to tampering by prototype polutioncure53 · dompurify · CWE-1321 | Kritik9,8 | — | %1,2 | 31 Eki 2024 |
32İzleyin | CVE-2026-47423Kavram kanıtı | DOMPurify XSS via `selectedcontent` re-clonecure53 · dompurify · CWE-79 | Yüksek8,2 | — | %0,4 | 14 Tem 2026 |
25İzleyin | CVE-2020-26870İstismar yok | Cure53 DOMPurify before 2.0.17 allows mutation XSS.cure53 · dompurify · CWE-79 | Orta6,1 | — | %4,9 | 7 Eki 2020 |
25İzleyin | CVE-2019-16728İstismar yok | DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS (mXSS) for an SVG element or a MATH element, as demonstrated by Chrome acure53 · dompurify · CWE-79 | Orta6,1 | — | %1,7 | 24 Eyl 2019 |
25İzleyin | CVE-2026-49978İstismar yok | DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.contentcure53 · dompurify · CWE-79 | Orta6,3 | — | %0,4 | 14 Tem 2026 |
24İzleyin | CVE-2024-47875Kavram kanıtı | DOMPurify nesting-based mXSScure53 · dompurify · CWE-79 | Orta6,1 | — | %1,1 | 11 Eki 2024 |
24İzleyin | CVE-2024-45801İstismar yok | Tampering by prototype polution in DOMPurifycure53 · dompurify · CWE-1333 | Orta6,1 | — | %0,9 | 16 Eyl 2024 |
24İzleyin | CVE-2025-26791İstismar yok | DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).cure53 · dompurify · CWE-79 | Orta6,1 | — | %0,6 | 14 Şub 2025 |
24İzleyin | CVE-2019-25155İstismar yok | DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attcure53 · dompurify · CWE-601 | Orta6,1 | — | %0,5 | 6 Kas 2023 |
24İzleyin | CVE-2026-49458İstismar yok | DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checkscure53 · dompurify · CWE-79 | Orta6,1 | — | %0,4 | 14 Tem 2026 |
24İzleyin | CVE-2026-41240İstismar yok | DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)cure53 · dompurify · CWE-79 | Orta6,0 | — | %0,4 | 23 Nis 2026 |
24İzleyin | CVE-2026-49459İstismar yok | DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOMcure53 · dompurify · CWE-79 | Orta6,1 | — | %0,4 | 14 Tem 2026 |
21İzleyin | CVE-2026-65902İstismar yok | DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTagscure53 · dompurify · CWE-501 | Orta5,3 | — | %0,4 | 23 Tem 2026 |
21İzleyin | CVE-2026-0540İstismar yok | DOMPurify XSS via Missing Rawtext Elements in SAFE_FOR_XMLcure53 · dompurify · CWE-79 | Orta5,3 | — | %0,3 | 3 Mar 2026 |
21İzleyin | CVE-2026-65914İstismar yok | DOMPurify before 3.3.2 Mutation XSS via Re-Contextualizationcure53 · dompurify · CWE-79 | Orta5,3 | — | %0,3 | 23 Tem 2026 |
20İzleyin | CVE-2026-65899İstismar yok | DOMPurify before 3.4.9 Trusted Types Policy State Contaminationcure53 · dompurify · CWE-693 | Orta5,1 | — | %0,4 | 23 Tem 2026 |
20İzleyin | CVE-2026-65911İstismar yok | DOMPurify before 3.4.0 XSS via ADD_ATTR/ADD_TAGS State Leakagecure53 · dompurify · CWE-79 | Orta5,1 | — | %0,3 | 23 Tem 2026 |
20İzleyin | CVE-2026-65903İstismar yok | DOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGScure53 · dompurify · CWE-697 | Orta5,1 | — | %0,3 | 23 Tem 2026 |
20İzleyin | CVE-2026-65913İstismar yok | DOMPurify before 3.3.2 Prototype Pollution via USE_PROFILEScure53 · dompurify · CWE-1321 | Orta5,1 | — | %0,3 | 23 Tem 2026 |
20İzleyin | CVE-2026-65900İstismar yok | DOMPurify before 3.4.8 Template Expression Injection via RETURN_DOMcure53 · dompurify · CWE-79 | Orta5,1 | — | %0,3 | 23 Tem 2026 |
20İzleyin | CVE-2026-66010İstismar yok | DOMPurify before 3.4.12 Hook Bypass via CUSTOM_ELEMENT_HANDLINGcure53 · dompurify · CWE-79 | Orta5,1 | — | %0,3 | 24 Tem 2026 |
20İzleyin | CVE-2026-65912İstismar yok | DOMPurify before 3.3.2 URI Validation Bypass via ADD_ATTRcure53 · dompurify · CWE-79 | Orta5,1 | — | %0,3 | 23 Tem 2026 |
20İzleyin | CVE-2026-65898İstismar yok | DOMPurify before 3.4.11 Permanent Attribute Allowlist Pollution via setConfigcure53 · dompurify · CWE-79 | Orta5,1 | — | %0,3 | 23 Tem 2026 |
20İzleyin | CVE-2026-65901İstismar yok | DOMPurify 3.4.6 Cross-Site Scripting via IN_PLACE nodeNamecure53 · dompurify · CWE-79 | Orta5,1 | — | %0,3 | 23 Tem 2026 |
20İzleyin | CVE-2025-15599İstismar yok | DOMPurify XSS via Textarea Rawtext Bypass in SAFE_FOR_XMLcure53 · dompurify · CWE-79 | Orta5,1 | — | %0,2 | 3 Mar 2026 |
- CVE-2024-4891039İzleyin
DOMPurify vulnerable to tampering by prototype polution
KritikCVSS 9,8Kavram kanıtıEPSS %1cure53 · dompurify31 Eki 2024
- CVE-2026-4742332İzleyin
DOMPurify XSS via `selectedcontent` re-clone
YüksekCVSS 8,2Kavram kanıtıEPSS %0cure53 · dompurify14 Tem 2026
- CVE-2020-2687025İzleyin
Cure53 DOMPurify before 2.0.17 allows mutation XSS.
OrtaCVSS 6,1İstismar yokEPSS %5cure53 · dompurify7 Eki 2020
- CVE-2019-1672825İzleyin
DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS (mXSS) for an SVG element or a MATH element, as demonstrated by Chrome a
OrtaCVSS 6,1İstismar yokEPSS %2cure53 · dompurify24 Eyl 2019
- CVE-2026-4997825İzleyin
DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content
OrtaCVSS 6,3İstismar yokEPSS %0cure53 · dompurify14 Tem 2026
- CVE-2024-4787524İzleyin
DOMPurify nesting-based mXSS
OrtaCVSS 6,1Kavram kanıtıEPSS %1cure53 · dompurify11 Eki 2024
- CVE-2024-4580124İzleyin
Tampering by prototype polution in DOMPurify
OrtaCVSS 6,1İstismar yokEPSS %1cure53 · dompurify16 Eyl 2024
- CVE-2025-2679124İzleyin
DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).
OrtaCVSS 6,1İstismar yokEPSS %1cure53 · dompurify14 Şub 2025
- CVE-2019-2515524İzleyin
DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' att
OrtaCVSS 6,1İstismar yokEPSS %1cure53 · dompurify6 Kas 2023
- CVE-2026-4945824İzleyin
DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks
OrtaCVSS 6,1İstismar yokEPSS %0cure53 · dompurify14 Tem 2026
- CVE-2026-4124024İzleyin
DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)
OrtaCVSS 6,0İstismar yokEPSS %0cure53 · dompurify23 Nis 2026
- CVE-2026-4945924İzleyin
DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM
OrtaCVSS 6,1İstismar yokEPSS %0cure53 · dompurify14 Tem 2026
- CVE-2026-6590221İzleyin
DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags
OrtaCVSS 5,3İstismar yokEPSS %0cure53 · dompurify23 Tem 2026
- CVE-2026-054021İzleyin
DOMPurify XSS via Missing Rawtext Elements in SAFE_FOR_XML
OrtaCVSS 5,3İstismar yokEPSS %0cure53 · dompurify3 Mar 2026
- CVE-2026-6591421İzleyin
DOMPurify before 3.3.2 Mutation XSS via Re-Contextualization
OrtaCVSS 5,3İstismar yokEPSS %0cure53 · dompurify23 Tem 2026
- CVE-2026-6589920İzleyin
DOMPurify before 3.4.9 Trusted Types Policy State Contamination
OrtaCVSS 5,1İstismar yokEPSS %0cure53 · dompurify23 Tem 2026
- CVE-2026-6591120İzleyin
DOMPurify before 3.4.0 XSS via ADD_ATTR/ADD_TAGS State Leakage
OrtaCVSS 5,1İstismar yokEPSS %0cure53 · dompurify23 Tem 2026
- CVE-2026-6590320İzleyin
DOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGS
OrtaCVSS 5,1İstismar yokEPSS %0cure53 · dompurify23 Tem 2026
- CVE-2026-6591320İzleyin
DOMPurify before 3.3.2 Prototype Pollution via USE_PROFILES
OrtaCVSS 5,1İstismar yokEPSS %0cure53 · dompurify23 Tem 2026
- CVE-2026-6590020İzleyin
DOMPurify before 3.4.8 Template Expression Injection via RETURN_DOM
OrtaCVSS 5,1İstismar yokEPSS %0cure53 · dompurify23 Tem 2026
- CVE-2026-6601020İzleyin
DOMPurify before 3.4.12 Hook Bypass via CUSTOM_ELEMENT_HANDLING
OrtaCVSS 5,1İstismar yokEPSS %0cure53 · dompurify24 Tem 2026
- CVE-2026-6591220İzleyin
DOMPurify before 3.3.2 URI Validation Bypass via ADD_ATTR
OrtaCVSS 5,1İstismar yokEPSS %0cure53 · dompurify23 Tem 2026
- CVE-2026-6589820İzleyin
DOMPurify before 3.4.11 Permanent Attribute Allowlist Pollution via setConfig
OrtaCVSS 5,1İstismar yokEPSS %0cure53 · dompurify23 Tem 2026
- CVE-2026-6590120İzleyin
DOMPurify 3.4.6 Cross-Site Scripting via IN_PLACE nodeName
OrtaCVSS 5,1İstismar yokEPSS %0cure53 · dompurify23 Tem 2026
- CVE-2025-1559920İzleyin
DOMPurify XSS via Textarea Rawtext Bypass in SAFE_FOR_XML
OrtaCVSS 5,1İstismar yokEPSS %0cure53 · dompurify3 Mar 2026