{"schemaVersion":3,"id":"CVE-2025-26791","aliases":["UBUNTU-CVE-2025-26791","DEBIAN-CVE-2025-26791","CGA-625f-wqmq-6fqh","CGA-xxr8-hhc3-w898","GHSA-vhxf-7vqr-mrjg","openSUSE-SU-2025:14921-1","CGA-284r-pjh2-xh43","CGA-2gf5-c2m5-gwf8","CGA-3996-g44w-jf9p","CGA-3c8w-hj79-prp6","CGA-3gjj-xq7r-mr49","CGA-3p76-g5h9-q2qr","CGA-43vf-79mj-p4p3","CGA-4jx2-q3g4-jj6g","CGA-5j82-85qx-9q26","CGA-5qhg-r4q4-rqj3","CGA-5vrr-679v-fhw6","CGA-6ghg-2g9w-fw8m","CGA-6m86-cfp4-25p5","CGA-6mj7-79fg-293c","CGA-7249-rr42-6qwh","CGA-72p4-8477-g89w","CGA-775r-9j7p-6w6h","CGA-7f6m-fgvm-j9v6","CGA-84hh-5hj3-94pm","CGA-85w3-64qp-xmrv","CGA-8952-p598-7cj7","CGA-8fxq-4p45-vr99","CGA-8g86-4h5w-8r2c","CGA-8xmr-6vmc-p24v","CGA-c2w3-j9x7-w7cw","CGA-cg6r-pqxq-5v8p","CGA-cgwv-4483-5f43","CGA-cj8r-fr7q-v44p","CGA-cm63-35w8-hmwm","CGA-f7cv-2cpp-pwfh","CGA-g3px-g82c-7257","CGA-gpjc-8v55-5qqx","CGA-gx4c-f4xm-gv55","CGA-h7fq-2m7v-4mgp","CGA-hv4j-q445-fpfc","CGA-j4pv-rmrj-p24m","CGA-jgpp-4rw5-vvmv","CGA-jj7g-8876-h9r6","CGA-m3xm-2jvq-4hv8","CGA-m42p-cw64-3x97","CGA-m5cr-766w-rggg","CGA-m8cc-h3fp-jh2m","CGA-mcfm-gcf2-692g","CGA-mj3m-rwwp-7jcv","CGA-p4c6-j6gm-r5xp","CGA-p9gx-vmw4-wvmr","CGA-pf97-f6p5-pf42","CGA-pp4h-6h68-6q96","CGA-q8hr-p8g9-5rgr","CGA-qc6x-wr76-3726","CGA-qhr2-w65m-ch3h","CGA-qq49-22w8-6248","CGA-rm24-r36g-gv2r","CGA-vfvp-rwfg-92jq","CGA-vpxh-4qhp-wvqw","CGA-vrpc-m359-w76r","CGA-whh9-pf8w-f289","CGA-x3wj-v8q3-hr4r","CGA-x694-m798-r7x4","CGA-xc8w-37w7-hgm5"],"status":"published","duplicateOf":null,"title":null,"description":"DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).","dates":{"published":"2025-02-14T00:00:00.000Z","modified":"2025-02-14T15:30:49.790Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.1,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":7.2,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":7.2,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":4.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","exploitability":3.6,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":4.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","exploitability":3.6,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":4.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","exploitability":3.6,"impact":4.5,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00605,"percentile":0.47955,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00605},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00605,"percentile":0.47955}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00605,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00605,"percentile":0.47955}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_ABEA141C11E29410","name":"Exploit Reference (nsysean.github.io)","source":"reference","url":"https://nsysean.github.io/posts/dompurify-323-bypass/","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_6A050375B1734F85","name":"Exploit Reference (ensy.zip)","source":"reference","url":"https://ensy.zip/posts/dompurify-323-bypass/","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":2,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"}],"affected":[{"vendor":"chainguard","product":"grafana-image-renderer","name":"grafana-image-renderer","label":"grafana-image-renderer","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-image-renderer","purlType":"apk","versions":[{"text":"< 3.12.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-alerting-dashboards-plugin","name":"opensearch-dashboards-2-alerting-dashboards-plugin","label":"opensearch-dashboards-2-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","name":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","label":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-config","name":"opensearch-dashboards-2-config","label":"opensearch-dashboards-2-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-config","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-maps","name":"opensearch-dashboards-2-dashboards-maps","label":"opensearch-dashboards-2-dashboards-maps","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-maps","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-notifications","name":"opensearch-dashboards-2-dashboards-notifications","label":"opensearch-dashboards-2-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-notifications","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-observability","name":"opensearch-dashboards-2-dashboards-observability","label":"opensearch-dashboards-2-dashboards-observability","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-observability","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-query-workbench","name":"opensearch-dashboards-2-dashboards-query-workbench","label":"opensearch-dashboards-2-dashboards-query-workbench","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-query-workbench","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-reporting","name":"opensearch-dashboards-2-dashboards-reporting","label":"opensearch-dashboards-2-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-reporting","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-search-relevance","name":"opensearch-dashboards-2-dashboards-search-relevance","label":"opensearch-dashboards-2-dashboards-search-relevance","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-search-relevance","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-visualizations","name":"opensearch-dashboards-2-dashboards-visualizations","label":"opensearch-dashboards-2-dashboards-visualizations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-visualizations","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","name":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","label":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","name":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","label":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-config","name":"opensearch-dashboards-2-fips-config","label":"opensearch-dashboards-2-fips-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-config","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-maps","name":"opensearch-dashboards-2-fips-dashboards-maps","label":"opensearch-dashboards-2-fips-dashboards-maps","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-maps","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-notifications","name":"opensearch-dashboards-2-fips-dashboards-notifications","label":"opensearch-dashboards-2-fips-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-notifications","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-observability","name":"opensearch-dashboards-2-fips-dashboards-observability","label":"opensearch-dashboards-2-fips-dashboards-observability","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-observability","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-query-workbench","name":"opensearch-dashboards-2-fips-dashboards-query-workbench","label":"opensearch-dashboards-2-fips-dashboards-query-workbench","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-query-workbench","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-reporting","name":"opensearch-dashboards-2-fips-dashboards-reporting","label":"opensearch-dashboards-2-fips-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-reporting","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-search-relevance","name":"opensearch-dashboards-2-fips-dashboards-search-relevance","label":"opensearch-dashboards-2-fips-dashboards-search-relevance","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-search-relevance","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-visualizations","name":"opensearch-dashboards-2-fips-dashboards-visualizations","label":"opensearch-dashboards-2-fips-dashboards-visualizations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-visualizations","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","name":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","label":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-ml-commons-dashboards","name":"opensearch-dashboards-2-fips-ml-commons-dashboards","label":"opensearch-dashboards-2-fips-ml-commons-dashboards","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-ml-commons-dashboards","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","name":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","label":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-security-dashboards-plugin","name":"opensearch-dashboards-2-fips-security-dashboards-plugin","label":"opensearch-dashboards-2-fips-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-index-management-dashboards-plugin","name":"opensearch-dashboards-2-index-management-dashboards-plugin","label":"opensearch-dashboards-2-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-ml-commons-dashboards","name":"opensearch-dashboards-2-ml-commons-dashboards","label":"opensearch-dashboards-2-ml-commons-dashboards","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-ml-commons-dashboards","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-security-analytics-dashboards-plugin","name":"opensearch-dashboards-2-security-analytics-dashboards-plugin","label":"opensearch-dashboards-2-security-analytics-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-security-dashboards-plugin","name":"opensearch-dashboards-2-security-dashboards-plugin","label":"opensearch-dashboards-2-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"grafana-image-renderer","name":"grafana-image-renderer","label":"grafana-image-renderer","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/grafana-image-renderer","purlType":"apk","versions":[{"text":"< 3.12.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.1-r1","eol":null,"hubHref":null},{"vendor":"cure53","product":"dompurify","name":"DOMPurify","label":"dompurify","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.2.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.4","eol":null,"hubHref":"/vendor/cure53/dompurify"},{"vendor":"debian","product":"node-dompurify","name":"node-dompurify","label":"node-dompurify","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-dompurify","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 3.1.7+dfsg+~3.0.5-2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 3.1.7+dfsg+~3.0.5-2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-dompurify","name":"node-dompurify","label":"node-dompurify","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-dompurify","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"Npm","product":"dompurify","name":"dompurify","label":"dompurify","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/dompurify","purlType":"npm","versions":[{"text":"< 3.2.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.4","eol":null,"hubHref":null},{"vendor":"opensuse","product":"argocd-cli&distro=openSUSE Tumbleweed","name":"argocd-cli","label":"argocd-cli&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/argocd-cli&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 2.14.8-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.14.8-1.1","eol":null,"hubHref":null}],"affectedCount":37,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/cure53/DOMPurify/releases/tag/3.2.4","label":"github.com/cure53/DOMPurify/releases/tag/3.2.4","hostname":"github.com","tags":["REPORT","WEB","Release Notes"]},{"url":"https://github.com/cure53/DOMPurify/commit/d18ffcb554e0001748865da03ac75dd7829f0f02","label":"github.com/cure53/DOMPurify/commit/d18ffcb554e0001748865da03ac75dd7829f0f02","hostname":"github.com","tags":["REPORT","FIX","WEB","Patch"]},{"url":"https://nsysean.github.io/posts/dompurify-323-bypass/","label":"nsysean.github.io/posts/dompurify-323-bypass/","hostname":"nsysean.github.io","tags":["REPORT","WEB","Exploit","Third Party Advisory"]},{"url":"https://ensy.zip/posts/dompurify-323-bypass/","label":"ensy.zip/posts/dompurify-323-bypass/","hostname":"ensy.zip","tags":["REPORT","WEB","Exploit","Third Party Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-26791","label":"ubuntu.com/security/CVE-2025-26791","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-26791","label":"www.cve.org/CVERecord?id=CVE-2025-26791","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-26791","label":"security-tracker.debian.org/tracker/CVE-2025-26791","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/26xxx/CVE-2025-26791.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/26xxx/CVE-2025-26791.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26791","label":"nvd.nist.gov/vuln/detail/CVE-2025-26791","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://ensy.zip/posts/dompurify-323-bypass","label":"ensy.zip/posts/dompurify-323-bypass","hostname":"ensy.zip","tags":["WEB"]},{"url":"https://github.com/cure53/DOMPurify","label":"github.com/cure53/DOMPurify","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://nsysean.github.io/posts/dompurify-323-bypass","label":"nsysean.github.io/posts/dompurify-323-bypass","hostname":"nsysean.github.io","tags":["WEB"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TTJ7LJNX5AFLSOMXVINY4EKWQGZA76AH/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-26791","label":"www.suse.com/security/cve/CVE-2025-26791","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["RHSA-2026:2769"],"duplicates":[],"related":["CGA-3GR4-2XR6-89VR","CGA-62F7-R46P-JJCW","CGA-JVW3-VQ6Q-H2Q7"]},"timeline":[{"kind":"published","date":"2025-02-14T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-02-14T15:30:49.790Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T16:05:51.965Z","stale":false,"partial":false}}