[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fx0aMr-Z1IKIiCv_EiiExgiaPTEzIMpN0b1B6S8Lurm4":3,"g5a-risk:CVE-2026-65899":124},{"success":4,"data":5,"meta":121},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":29,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":65,"weaknesses":66,"weaknessesCount":49,"isActivelyExploited":75,"cisaInfo":29,"otxData":29,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":112,"notableEvents":113},"CVE-2026-65899","What is CVE-2026-65899?","DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types policy when clearConfig() is called, so a DOMPurify instance reused across trust boundaries stays bound to a previously supplied TRUSTED_TYPES_POLICY. A later caller that requests RETURN_TRUSTED_TYPE output receives a TrustedHTML object created by the old (potentially unsafe) policy rather than a clean default, which can lead to script execution at a Trusted Types sink. Passing TRUSTED_TYPES_POLICY: null on the later call also does not clear the retained policy.","DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types policy when clearConfig() is called, so a DOMPurify instance reused across trust bound...","2026-07-23T14:18:04.683","2026-10-08T16:17:29.863",5.1,"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"disclosure@vulncheck.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","NETWORK","LOW","NONE","REQUIRED","CHANGED",6.1,"MEDIUM",null,2.8,2.7,[],[],[35],{"Source":17,"Type":18,"CVSSData":36},{"Version":37,"VectorString":13,"BaseScore":12,"BaseSeverity":28,"AttackVector":22,"AttackComplexity":23,"AttackRequirements":24,"PrivilegesRequired":24,"UserInteraction":38,"VulnConfidentialityImpact":24,"VulnIntegrityImpact":24,"VulnAvailabilityImpact":24,"SubConfidentialityImpact":23,"SubIntegrityImpact":23,"SubAvailabilityImpact":24,"ExploitMaturity":39,"ConfidentialityRequirement":39,"IntegrityRequirement":39,"AvailabilityRequirement":39,"ModifiedAttackVector":39,"ModifiedAttackComplexity":39,"ModifiedAttackRequirements":39,"ModifiedPrivilegesRequired":39,"ModifiedUserInteraction":39,"ModifiedVulnConfidentialityImpact":39,"ModifiedVulnIntegrityImpact":39,"ModifiedVulnAvailabilityImpact":39,"ModifiedSubConfidentialityImpact":39,"ModifiedSubIntegrityImpact":39,"ModifiedSubAvailabilityImpact":39,"Safety":39,"Automatable":39,"Recovery":39,"ValueDensity":39,"VulnerabilityResponseEffort":39,"ProviderUrgency":39},"4.0","ACTIVE","NOT_DEFINED",0.00413,[40,40,40,40,40,40,40],"Medium",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"cure53","dompurify","*","cpe:2.3:a:cure53:dompurify:*:*:*:*:*:*:*:*",1,[51,56,61],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fgithub.com\u002Fcure53\u002FDOMPurify\u002Fcommit\u002F825e617753ac1169306a542d3174a77f717a0cf6","GitHub",[55],"Patch",{"url":57,"source":53,"tags":58},"https:\u002F\u002Fgithub.com\u002Fcure53\u002FDOMPurify\u002Fsecurity\u002Fadvisories\u002FGHSA-vxr8-fq34-vvx9",[59,60],"Exploit","Third Party Advisory",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fdompurify-before-trusted-types-policy-state-contamination","Vulncheck",[60],3,[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-693","Protection Mechanism Failure","The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","This weakness covers three distinct situations. A \"missing\" protection mechanism occurs when the application does not define any mechanism against a certain class of attack. An \"insufficient\" protection mechanism might provide some defenses - for example, against the most common attacks - but it does not protect against everything that is intended. Finally, an \"ignored\" mechanism occurs when a mechanism is available and in active use within the product, but the developer has not applied it in some code path.","Draft","Pillar","Simple",false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2026-65899? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2026-65899, a medium severity cyber security vulnerability from 2026. DOMPurify 3.0.0 before 3.4.9 does not reset the retained ...","CVE-2026-65899, CVE-2026-65899 vulnerability, CVE-2026-65899 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, cure53 security, dompurify vulnerability","\u002Fwhat-is\u002Fcve-2026-65899",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2026-65899","Cybersecurity","CVE-2026-65899, CVE-2026-65899 vulnerability, CVE-2026-65899 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":29,"Negate":29,"Nodes":104},[105],{"Operator":106,"Negate":75,"CPEMatch":107},"OR",[108],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":109,"VersionStartExcluding":29,"VersionStartIncluding":110,"VersionEndExcluding":111,"VersionEndIncluding":29},"CC7EE4C8-34A0-478F-8F60-6EA9D6FB00EB","3.0.0","3.4.9",[],[114],{"id":115,"eventType":116,"eventTime":117,"details":118,"label":119,"color":120},"2b76b44e-0d6c-4806-8a40-2dd70ff87823","NEW_NVD","2026-07-24T04:01:29.662732+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":122,"version":123},1792364736242,"2.0",{"score":125,"band":126,"action":127,"scoredAt":128},22,"Low","Monitor","2026-10-16T07:15:25.96618+00:00"]