cure53 has 1 CVE on record. 1 was published in the last 90 days. The median CVSS is 6.1 (medium).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 6.1
Publish → KEV: —
Last 90 days: 1 prev 0

Weakness classes

CWE-79 1

Products

DOMPurify 1

Follow cure53:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-66010Medium· 6.1DOMPurify before 3.4.12 Hook Bypass via CUSTOM_ELEMENT_HANDLING46

cure53 vulnerabilities

CVEs affecting cure53, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-66010Medium· 6.1PoC

DOMPurify before 3.4.12 Hook Bypass via CUSTOM_ELEMENT_HANDLING

DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOM_ELEMENT_HANDLING.tagNameCheck, allowing attributes to bypass application security policies. Attackers can preserve sensitive attri…

▾ Twilightcure53 · DOMPurifyEPSS 0.21%via CVEORG

cure53 vulnerabilities (CVEs) · VulnSea