CVE-2026-75838

Publication date 19 August 2026

Last updated 25 August 2026


Ubuntu priority

Description

(DOMPurify before 3.4.13 contains a cross-site scripting vulnerability ...)

Status

Package Ubuntu Release Status
node-dompurify 26.04 LTS resolute
Needs evaluation
24.04 LTS noble
Needs evaluation
22.04 LTS jammy
Needs evaluation

Severity score breakdown

CVSS version: CVSS v4.0

Base score 5.1 · Medium

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N


Access our resources on patching vulnerabilities