C
Vendor security profile
cure53
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs18
Critical0
CISA KEV0
Public exploit15
Patch rate%39
Avg. CVSS5.9
12-month vulnerability rate
0
0
0
0
1
0
0
0
16
1
0
0
CVE KEV
CVE severity distribution
18toplam CVE
High2 (11%)
Medium16 (89%)
Patch and exploitation view
%39
Verified patch
%0
CISA KEV
%83
Public exploit
7Patch available
0Partial
0Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
5.1
CVE-2026-75838
DOMPurify before 3.4.13 Cross-Site Scripting via IN_PLACE hook
C
Patch status unknownEPSS %0
5.1
CVE-2026-66010
DOMPurify before 3.4.12 Hook Bypass via CUSTOM_ELEMENT_HANDLING
C
Patch status unknownEPSS %0
5.1
CVE-2026-65913
DOMPurify before 3.3.2 Prototype Pollution via USE_PROFILES
C
Patch status unknownEPSS %0
5.1
CVE-2026-65899
DOMPurify before 3.4.9 Trusted Types Policy State Contamination
C
Patch verifiedEPSS %0
6.1
CVE-2026-65914
Cross-site scripting in Cure53 Dompurify
C
Patch status unknownEPSS %0
6.1
CVE-2026-65912
Cross-site scripting in Cure53 Dompurify
C
Patch status unknownEPSS %0
6.1
CVE-2026-65911
Cross-site scripting in Cure53 Dompurify
C
Patch status unknownEPSS %0
4.7
CVE-2026-65904
Vulnerability in Cure53 Dompurify
C
Patch status unknownEPSS %0
6.1
CVE-2026-65903
Vulnerability in Cure53 Dompurify
C
Patch status unknownEPSS %0
6.1
CVE-2026-65902
Vulnerability in Cure53 Dompurify
C
Patch verifiedEPSS %0