CVE-2025-15599

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-15599
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15599.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-15599
Aliases
Downstream
Related
Published
2026-03-03T17:26:05Z
Modified
2026-08-12T03:51:26Z
Severity
  • 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N CVSS Calculator
Summary
DOMPurify XSS via Textarea Rawtext Bypass in SAFE_FOR_XML
Details

DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting missing textarea rawtext element validation in the SAFE_FOR_XML regex. Attackers can include closing rawtext tags like in attribute values to break out of rawtext contexts and execute JavaScript when sanitized output is placed inside rawtext elements. The 3.x branch was fixed in 3.2.7; the 2.x branch was never patched.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15599.json"
}
References

Affected packages

Git / github.com/cure53/dompurify

Affected ranges

Type
GIT
Repo
https://github.com/cure53/dompurify
Events
Introduced
e1ddfc7b5e6d6599c369f826699b0204e2c691b9
Last Affected
ee992fc4880215757c9c09e9638bb95e1dc24533
Introduced
3fe78d7501103832166613bb1452985dd4674008
Fixed
eaa0bdb26a1d0164af587d9059b98269008faece
Fixed
c861f5a83fb8d90800f1680f855fee551161ac2b
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:cure53:dompurify:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.5.3"
        },
        {
            "last_affected": "2.5.8"
        },
        {
            "introduced": "3.1.3"
        },
        {
            "fixed": "3.2.7"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

2.*
2.5.3
2.5.4
2.5.5
2.5.6
2.5.7
2.5.8
3.*
3.1.3
3.2.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15599.json"