| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-41240 | vulnerable | vulnerable | vulnerable | vulnerable | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathM ... |
| CVE-2026-41239 | vulnerable | vulnerable | vulnerable | vulnerable | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathM ... |
| CVE-2026-41238 | vulnerable | vulnerable | vulnerable | vulnerable | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathM ... |
| CVE-2026-0540 | vulnerable | vulnerable | fixed | fixed | DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit ... |
| CVE-2025-26791 | vulnerable (no DSA) | fixed | fixed | fixed | DOMPurify before 3.2.4 has an incorrect template literal regular expre ... |
| CVE-2025-15599 | vulnerable | vulnerable | fixed | fixed | DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross- ... |