CVE-2025-26791
Fixed in a distro release EPSS <1%CVSS 4.5
DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).
Products: cure53 dompurify
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | dompurify | 3.2.4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | grafana-image-renderer | 3.12.1-r1 |
| Chainguard | opensearch-dashboards-2 | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-alerting-dashboards-plugin | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-anomaly-detection-dashboards-plugin | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-config | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-dashboards-maps | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-dashboards-notifications | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-dashboards-observability | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-dashboards-query-workbench | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-dashboards-reporting | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-dashboards-search-relevance | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-dashboards-visualizations | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-alerting-dashboards-plugin | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-config | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-maps | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-notifications | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-observability | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-query-workbench | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-reporting | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-search-relevance | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-visualizations | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-index-management-dashboards-plugin | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-ml-commons-dashboards | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-security-analytics-dashboards-plugin | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-fips-security-dashboards-plugin | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-index-management-dashboards-plugin | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-ml-commons-dashboards | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-security-analytics-dashboards-plugin | 2.19.0-r1 |
| Chainguard | opensearch-dashboards-2-security-dashboards-plugin | 2.19.0-r1 |
| Debian 12 | node-dompurify | no fix |
| Debian 13 | node-dompurify | 3.1.7+dfsg+~3.0.5-2 |
| Debian 14 | node-dompurify | 3.1.7+dfsg+~3.0.5-2 |
| Red Hat ceph storage 7.1 | ceph | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-base | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-base | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-base-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-base-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-common | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-common | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-common-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-common-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-debugsource | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-debugsource | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-exporter-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-exporter-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-fuse | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-fuse | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-fuse-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-fuse-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-immutable-object-cache | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-immutable-object-cache | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-immutable-object-cache-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-immutable-object-cache-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-mds-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-mds-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-mgr-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-mgr-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-mib | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-mib | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-mon-client-nvmeof-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-mon-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-mon-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-osd-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-osd-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-radosgw-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-radosgw-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-resource-agents | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-resource-agents | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-selinux | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-selinux | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-test-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-test-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | cephadm | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | cephfs-mirror-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | cephfs-mirror-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | cephfs-top | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | cephfs-top | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | libcephfs-devel | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | libcephfs-devel | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libcephfs2 | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libcephfs2 | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | libcephfs2-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libcephfs2-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | libcephsqlite-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libcephsqlite-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librados-devel | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librados-devel | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librados-devel-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librados-devel-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librados2 | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librados2 | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librados2-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librados2-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | libradospp-devel | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | libradospp-devel | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libradosstriper1 | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libradosstriper1 | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | libradosstriper1-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libradosstriper1-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librbd-devel | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librbd-devel | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librbd1 | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librbd1 | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librbd1-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librbd1-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librgw-devel | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librgw-devel | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librgw2 | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librgw2 | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librgw2-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librgw2-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-ceph-argparse | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-ceph-argparse | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-ceph-common | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-ceph-common | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-cephfs | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-cephfs | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-cephfs-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-cephfs-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-rados | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-rados | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-rados-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-rados-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-rbd | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-rbd | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-rbd-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-rbd-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-rgw | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-rgw | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-rgw-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-rgw-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | rbd-fuse-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | rbd-fuse-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | rbd-mirror-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | rbd-mirror-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | rbd-nbd | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | rbd-nbd | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | rbd-nbd-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | rbd-nbd-debuginfo | 2:18.2.1-381.el9cp |
| Ubuntu 22.04 LTS | node-dompurify | no fix |
| Ubuntu 24.04 LTS | node-dompurify | no fix |
| Ubuntu 25.10 | node-dompurify | no fix |
| Ubuntu 26.04 LTS | node-dompurify | no fix |
| Ubuntu 26.10 | node-dompurify | no fix |
| Wolfi | grafana-image-renderer | 3.12.1-r1 |
| openSUSE Tumbleweed | argocd-cli | 2.14.8-1.1 |