CVE-2026-65899

Katalog CVE

CVSS 6.1 · Medium EPSS 0,41%

Kerentanan Protection Mechanism Failure pada cure53 dompurify. Skor CVSS 3.1 6.1 (Medium) menurut vulncheck.com.

Deskripsi (NVD)

DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types policy when clearConfig() is called, so a DOMPurify instance reused across trust boundaries stays bound to a previously supplied TRUSTED_TYPES_POLICY. A later caller that requests RETURN_TRUSTED_TYPE output receives a TrustedHTML object created by the old (potentially unsafe) policy rather than a clean default, which can lead to script execution at a Trusted Types sink. Passing TRUSTED_TYPES_POLICY: null on the later call also does not clear the retained policy.

Rincian

Terbit di NVD

23 Juli 2026

Terakhir diubah

8 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

6.1 (Medium), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-693: Protection Mechanism Failure

EPSS (30 hari)

0,41% peluang dieksploitasi; lebih tinggi dari 33,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/cure53/DOMPurify/commit/825e617753ac1169306a542d3174a77f717a0cf6 patch
• https://github.com/cure53/DOMPurify/security/advisories/GHSA-vxr8-fq34-vvx9 exploit · advisory pihak ketiga
• https://www.vulncheck.com/advisories/dompurify-before-trusted-types-policy-state-contamination advisory pihak ketiga