{"schema_version":1,"title":"Cure53 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 38 vulnerabilities in Cure53: 3 in the last 7 days and 11 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-116804, was published on 27 October 2026. 7 vulnerabilities in the last four weeks, up from none in the four before. 1 critical against 0. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/cure53","json_url":"https://junglewise.ai/threats/vendors/cure53.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/cure53","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":3,"all_time":38,"critical":1,"exploited":0,"last_7_days":3,"last_30_days":9,"last_90_days":11,"last_365_days":31},"latest":[{"cve":"CVE-2026-116804","cvss":6.1,"slug":"cve-2026-116804-dompurify-from-3-4-4-before-3-4-17-contains-a-safe-for-templates","title":"DOMPurify SAFE_FOR_TEMPLATES bypass via shadow root content","severity":"medium","exploited":false,"published_at":"2026-10-27T00:17:12.193+00:00","url":"https://junglewise.ai/threats/cve-2026-116804-dompurify-from-3-4-4-before-3-4-17-contains-a-safe-for-templates"},{"cve":"CVE-2026-116803","cvss":6.1,"slug":"cve-2026-116803-dompurify-before-3-4-17-contains-a-cross-site-scripting","title":"DOMPurify DOM XSS in IN_PLACE hook-detached subtrees","severity":"medium","exploited":false,"published_at":"2026-10-27T00:17:11.913+00:00","url":"https://junglewise.ai/threats/cve-2026-116803-dompurify-before-3-4-17-contains-a-cross-site-scripting"},{"cve":"CVE-2026-116802","cvss":6.1,"slug":"cve-2026-116802-dompurify-before-3-4-17-contains-a-cross-site-scripting","title":"DOMPurify cross-site scripting in SMIL attributeName guard bypass","severity":"medium","exploited":false,"published_at":"2026-10-27T00:17:11.637+00:00","url":"https://junglewise.ai/threats/cve-2026-116802-dompurify-before-3-4-17-contains-a-cross-site-scripting"},{"cvss":4,"slug":"dompurify-safe-for-templates-bypass-split-template-expressions-survive-c23665cf","title":"DOMPurify SAFE_FOR_TEMPLATES bypass in shadow root content","severity":"critical","exploited":false,"published_at":"2026-10-22T16:25:31+00:00","url":"https://junglewise.ai/threats/dompurify-safe-for-templates-bypass-split-template-expressions-survive-c23665cf"},{"cvss":4,"slug":"dompurify-in-place-hook-that-removes-a-parent-or-sibling-leaves-the-3ea5d18f","title":"DOMPurify IN_PLACE event handler bypass when hook removes parent or sibling","severity":"high","exploited":false,"published_at":"2026-10-22T16:24:52+00:00","url":"https://junglewise.ai/threats/dompurify-in-place-hook-that-removes-a-parent-or-sibling-leaves-the-3ea5d18f"},{"slug":"dompurify-smil-attributename-href-guard-is-skipped-when-parser-media-15a5efd2","title":"DOMPurify SMIL attributeName=href guard bypass in XHTML mode","severity":"low","exploited":false,"published_at":"2026-10-22T16:24:23+00:00","url":"https://junglewise.ai/threats/dompurify-smil-attributename-href-guard-is-skipped-when-parser-media-15a5efd2"},{"cve":"CVE-2026-109345","cvss":6.1,"epss":0.002,"slug":"cve-2026-109345-dompurify-before-3-4-16-contains-a-cross-site-scripting","title":"DOMPurify cross-site scripting in IN_PLACE mode sanitization","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:31.217+00:00","url":"https://junglewise.ai/threats/cve-2026-109345-dompurify-before-3-4-16-contains-a-cross-site-scripting"},{"cve":"CVE-2026-109344","cvss":6.1,"epss":0.0019,"slug":"cve-2026-109344-dompurify-from-3-4-13-before-3-4-16-contains-a-cross-site","title":"DOMPurify cross-site scripting in IN_PLACE mode with afterSanitize hooks","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:31.06+00:00","url":"https://junglewise.ai/threats/cve-2026-109344-dompurify-from-3-4-13-before-3-4-16-contains-a-cross-site"},{"slug":"dompurify-in-place-returns-a-force-removed-rawtext-root-whose-text-16d9ac9e","title":"DOMPurify IN_PLACE mode XSS via rawtext element text content","severity":"info","exploited":false,"published_at":"2026-10-05T23:43:53+00:00","url":"https://junglewise.ai/threats/dompurify-in-place-returns-a-force-removed-rawtext-root-whose-text-16d9ac9e"},{"cvss":4,"slug":"dompurify-in-place-node-removing-aftersanitize-hook-leaves-detached-3087e7fd","title":"DOMPurify DOM XSS in IN_PLACE mode with afterSanitize hooks","severity":"medium","exploited":false,"published_at":"2026-09-30T15:37:57+00:00","url":"https://junglewise.ai/threats/dompurify-in-place-node-removing-aftersanitize-hook-leaves-detached-3087e7fd"},{"cve":"CVE-2026-75838","cvss":4,"epss":0.003,"slug":"cve-2026-75838-dompurify-in-place-hook-removal-xss-via-detached-subtree","title":"DOMPurify IN_PLACE hook removal XSS via detached subtree","severity":"medium","exploited":false,"published_at":"2026-08-18T12:19:34.05+00:00","url":"https://junglewise.ai/threats/cve-2026-75838-dompurify-in-place-hook-removal-xss-via-detached-subtree"},{"cve":"CVE-2026-66010","cvss":6.1,"epss":0.0031,"slug":"cve-2026-66010-dompurify-hook-bypass-in-custom-element-handling","title":"DOMPurify hook bypass in CUSTOM_ELEMENT_HANDLING","severity":"medium","exploited":false,"published_at":"2026-07-24T13:18:28.72+00:00","url":"https://junglewise.ai/threats/cve-2026-66010-dompurify-hook-bypass-in-custom-element-handling"},{"cve":"CVE-2026-65914","cvss":4,"epss":0.0031,"slug":"cve-2026-65914-cure53-dompurify-mutation-xss-via-re-contextualization","title":"cure53 DOMPurify mutation-XSS via Re-Contextualization","severity":"medium","exploited":false,"published_at":"2026-07-23T14:18:07.057+00:00","url":"https://junglewise.ai/threats/cve-2026-65914-cure53-dompurify-mutation-xss-via-re-contextualization"},{"cve":"CVE-2026-65913","cvss":6.1,"epss":0.0032,"slug":"cve-2026-65913-cure53-dompurify-prototype-pollution-in-use-profiles-mode","title":"cure53 DOMPurify prototype pollution in USE_PROFILES mode","severity":"medium","exploited":false,"published_at":"2026-07-23T14:18:06.573+00:00","url":"https://junglewise.ai/threats/cve-2026-65913-cure53-dompurify-prototype-pollution-in-use-profiles-mode"},{"cve":"CVE-2026-65912","cvss":6.1,"epss":0.003,"slug":"cve-2026-65912-cure53-dompurify-uri-validation-bypass-in-attributecheck","title":"cure53 DOMPurify URI validation bypass in attributeCheck","severity":"medium","exploited":false,"published_at":"2026-07-23T14:18:06.417+00:00","url":"https://junglewise.ai/threats/cve-2026-65912-cure53-dompurify-uri-validation-bypass-in-attributecheck"},{"cve":"CVE-2026-65911","cvss":6.1,"slug":"cve-2026-65911-cure53-dompurify-xss-via-state-leakage-in-add-attr-and-add-tags","title":"Cure53 DOMPurify XSS via state leakage in ADD_ATTR and ADD_TAGS","severity":"medium","exploited":false,"published_at":"2026-07-23T14:18:06.26+00:00","url":"https://junglewise.ai/threats/cve-2026-65911-cure53-dompurify-xss-via-state-leakage-in-add-attr-and-add-tags"},{"cve":"CVE-2026-65904","cvss":4.7,"slug":"cve-2026-65904-cure53-dompurify-xss-bypass-in-in-place-mode-via-cross-realm","title":"cure53 DOMPurify XSS bypass in IN_PLACE mode via cross-realm nodes","severity":"medium","exploited":false,"published_at":"2026-07-23T14:18:06.063+00:00","url":"https://junglewise.ai/threats/cve-2026-65904-cure53-dompurify-xss-bypass-in-in-place-mode-via-cross-realm"},{"cve":"CVE-2026-65903","cvss":6.1,"epss":0.0033,"slug":"cve-2026-65903-cure53-dompurify-logic-error-in-add-tags-function-bypasses-forbid","title":"cure53 DOMPurify logic error in ADD_TAGS function bypasses FORBID_TAGS","severity":"medium","exploited":false,"published_at":"2026-07-23T14:18:05.903+00:00","url":"https://junglewise.ai/threats/cve-2026-65903-cure53-dompurify-logic-error-in-add-tags-function-bypasses-forbid"},{"cve":"CVE-2026-65902","cvss":6.1,"epss":0.0036,"slug":"cve-2026-65902-cure53-dompurify-global-allow-list-pollution-via-hook-mutation","title":"cure53 DOMPurify global allow-list pollution via hook mutation","severity":"medium","exploited":false,"published_at":"2026-07-23T14:18:05.453+00:00","url":"https://junglewise.ai/threats/cve-2026-65902-cure53-dompurify-global-allow-list-pollution-via-hook-mutation"},{"cve":"CVE-2026-65901","cvss":6.1,"epss":0.0029,"slug":"cve-2026-65901-cure53-dompurify-xss-in-in-place-mode-via-nodename-clobbering","title":"cure53 DOMPurify XSS in IN_PLACE mode via nodeName clobbering","severity":"medium","exploited":false,"published_at":"2026-07-23T14:18:05+00:00","url":"https://junglewise.ai/threats/cve-2026-65901-cure53-dompurify-xss-in-in-place-mode-via-nodename-clobbering"},{"cve":"CVE-2026-65900","cvss":6.1,"epss":0.0031,"slug":"cve-2026-65900-cure53-dompurify-template-expression-bypass-in-dom-output-modes","title":"cure53 DOMPurify template expression bypass in DOM output modes","severity":"medium","exploited":false,"published_at":"2026-07-23T14:18:04.843+00:00","url":"https://junglewise.ai/threats/cve-2026-65900-cure53-dompurify-template-expression-bypass-in-dom-output-modes"},{"cve":"CVE-2026-65899","cvss":6.1,"epss":0.0041,"slug":"cve-2026-65899-cure53-dompurify-state-contamination-in-trusted-types-policy","title":"cure53 DOMPurify state contamination in Trusted Types policy","severity":"medium","exploited":false,"published_at":"2026-07-23T14:18:04.683+00:00","url":"https://junglewise.ai/threats/cve-2026-65899-cure53-dompurify-state-contamination-in-trusted-types-policy"},{"cve":"CVE-2026-65898","cvss":7.2,"epss":0.003,"slug":"cve-2026-65898-cure53-dompurify-allowlist-pollution-via-setconfig","title":"cure53 DOMPurify allowlist pollution via setConfig","severity":"high","exploited":false,"published_at":"2026-07-23T14:18:04.517+00:00","url":"https://junglewise.ai/threats/cve-2026-65898-cure53-dompurify-allowlist-pollution-via-setconfig"},{"cve":"CVE-2026-49978","cvss":4,"epss":0.004,"slug":"cve-2026-49978-cure53-dompurify-xss-bypass-in-in-place-sanitization","title":"Cure53 DOMPurify XSS bypass in IN_PLACE sanitization","severity":"medium","exploited":false,"published_at":"2026-07-14T21:17:02.56+00:00","url":"https://junglewise.ai/threats/cve-2026-49978-cure53-dompurify-xss-bypass-in-in-place-sanitization"},{"cve":"CVE-2026-49459","cvss":6.1,"epss":0.0037,"slug":"cve-2026-49459-cure53-dompurify-xss-via-dom-clobbering-in-in-place-mode","title":"cure53 DOMPurify XSS via DOM Clobbering in IN_PLACE mode","severity":"medium","exploited":false,"published_at":"2026-07-14T21:17:01.743+00:00","url":"https://junglewise.ai/threats/cve-2026-49459-cure53-dompurify-xss-via-dom-clobbering-in-in-place-mode"}],"vendor":{"hub":true,"name":"Cure53","slug":"cure53","homepage":"https://cure53.de","description":"German cybersecurity firm specializing in security audits, penetration testing, and vulnerability research.","url":"https://junglewise.ai/threats/vendors/cure53"},"weekly":[{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-10-19","critical":1,"exploited":0,"vulnerabilities":3},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":3}],"most_severe":[{"cvss":4,"slug":"dompurify-safe-for-templates-bypass-split-template-expressions-survive-c23665cf","title":"DOMPurify SAFE_FOR_TEMPLATES bypass in shadow root content","severity":"critical","exploited":false,"published_at":"2026-10-22T16:25:31+00:00","url":"https://junglewise.ai/threats/dompurify-safe-for-templates-bypass-split-template-expressions-survive-c23665cf"},{"cve":"CVE-2026-47423","cvss":8.2,"epss":0.0041,"slug":"cve-2026-47423-cure53-dompurify-xss-bypass-via-selectedcontent-re-cloning","title":"cure53 DOMPurify XSS bypass via selectedcontent re-cloning","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:02.143+00:00","url":"https://junglewise.ai/threats/cve-2026-47423-cure53-dompurify-xss-bypass-via-selectedcontent-re-cloning"},{"cve":"CVE-2026-65898","cvss":7.2,"epss":0.003,"slug":"cve-2026-65898-cure53-dompurify-allowlist-pollution-via-setconfig","title":"cure53 DOMPurify allowlist pollution via setConfig","severity":"high","exploited":false,"published_at":"2026-07-23T14:18:04.517+00:00","url":"https://junglewise.ai/threats/cve-2026-65898-cure53-dompurify-allowlist-pollution-via-setconfig"},{"cvss":4,"slug":"dompurify-in-place-hook-that-removes-a-parent-or-sibling-leaves-the-3ea5d18f","title":"DOMPurify IN_PLACE event handler bypass when hook removes parent or sibling","severity":"high","exploited":false,"published_at":"2026-10-22T16:24:52+00:00","url":"https://junglewise.ai/threats/dompurify-in-place-hook-that-removes-a-parent-or-sibling-leaves-the-3ea5d18f"},{"cve":"CVE-2026-41238","cvss":6.9,"epss":0.0023,"slug":"cve-2026-41238-dompurify-prototype-pollution-to-xss-bypass-via-custom-element","title":"DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallback","severity":"medium","exploited":false,"published_at":"2026-04-23T16:16:26.42+00:00","url":"https://junglewise.ai/threats/cve-2026-41238-dompurify-prototype-pollution-to-xss-bypass-via-custom-element"},{"cve":"CVE-2026-41239","cvss":6.8,"epss":0.0025,"slug":"cve-2026-41239-dompurify-has-a-safe-for-templates-bypass-in-return-dom-mode","title":"DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode","severity":"medium","exploited":false,"published_at":"2026-04-23T16:16:26.56+00:00","url":"https://junglewise.ai/threats/cve-2026-41239-dompurify-has-a-safe-for-templates-bypass-in-return-dom-mode"},{"cve":"CVE-2026-65899","cvss":6.1,"epss":0.0041,"slug":"cve-2026-65899-cure53-dompurify-state-contamination-in-trusted-types-policy","title":"cure53 DOMPurify state contamination in Trusted Types policy","severity":"medium","exploited":false,"published_at":"2026-07-23T14:18:04.683+00:00","url":"https://junglewise.ai/threats/cve-2026-65899-cure53-dompurify-state-contamination-in-trusted-types-policy"},{"cve":"CVE-2026-49458","cvss":6.1,"epss":0.004,"slug":"cve-2026-49458-cure53-dompurify-xss-via-cross-realm-bypass-in-in-place-mode","title":"cure53 DOMPurify XSS via cross-realm bypass in IN_PLACE mode","severity":"medium","exploited":false,"published_at":"2026-07-14T21:17:01.62+00:00","url":"https://junglewise.ai/threats/cve-2026-49458-cure53-dompurify-xss-via-cross-realm-bypass-in-in-place-mode"},{"cve":"CVE-2026-49459","cvss":6.1,"epss":0.0037,"slug":"cve-2026-49459-cure53-dompurify-xss-via-dom-clobbering-in-in-place-mode","title":"cure53 DOMPurify XSS via DOM Clobbering in IN_PLACE mode","severity":"medium","exploited":false,"published_at":"2026-07-14T21:17:01.743+00:00","url":"https://junglewise.ai/threats/cve-2026-49459-cure53-dompurify-xss-via-dom-clobbering-in-in-place-mode"},{"cve":"CVE-2026-65902","cvss":6.1,"epss":0.0036,"slug":"cve-2026-65902-cure53-dompurify-global-allow-list-pollution-via-hook-mutation","title":"cure53 DOMPurify global allow-list pollution via hook mutation","severity":"medium","exploited":false,"published_at":"2026-07-23T14:18:05.453+00:00","url":"https://junglewise.ai/threats/cve-2026-65902-cure53-dompurify-global-allow-list-pollution-via-hook-mutation"}],"generated_at":"2026-10-31T03:07:00.148028+00:00","technologies":[{"name":"Cure53 DOMPurify","slug":"cure53-dompurify","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/cure53-dompurify"}]}