Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
cure53 dompurify may let harmful content run
published 8 days ago
Summary
The dompurify library used to clean web content had two security gaps that could let dangerous code execute in users' browsers. Updating to version 3.0.6‑tuxcare.6 removes these gaps. Apply the TuxCare update as soon as possible to protect your web applications.
What to do
- Update cure53 dompurify to version 3.0.6-tuxcare.6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | cure53 | dompurify |
>= 3.0.6-tuxcare.0, < 3.0.6-tuxcare.6 Fix: upgrade to 3.0.6-tuxcare.6
|
Original advisory text
TuxCare security update for dompurify (2 CVEs)
TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 3.0.6-tuxcare.6.
Timeline
Published27 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
CLSA-2026-1793097362 · OSV
Track software like this
Free during beta