dompurify.js vulnerabilities (Ubuntu)

7 vulnerabilities.

• dompurify.js Ubuntu DOMPurify XSS via `selectedcontent` re-clone CVE-2026-47423 Public exploitFix available 8.2 HighJune 1, 2026
• dompurify.js Ubuntu DOMPurify Open Redirect vulnerability CVE-2019-25155 Fix available 6.1 MediumOctober 31, 2023
• dompurify.js Ubuntu Cross-site Scripting in dompurify CVE-2020-26870 Fix available 6.1 MediumOctober 7, 2020
• dompurify.js Ubuntu Cross-Site Scripting in dompurify CVE-2019-16728 Fix available 6.1 MediumSeptember 24, 2019
• dompurify.js Ubuntu DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content CVE-2026-49978 Fix available 6.3 MediumJune 5, 2019
• dompurify.js Ubuntu DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM CVE-2026-49459 Fix available 6.1 MediumJune 5, 2019
• dompurify.js Ubuntu DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks CVE-2026-49458 Fix available 6.1 MediumJune 5, 2019