Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-39826

Опубликовано: 10 мая 2026
Источник: msrc
CVSS3: 6.1
EPSS Низкий

Описание

Escaper bypass leads to XSS in html/template

EPSS

Процентиль: 29%
0.00371
Низкий

6.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.1
ubuntu
3 месяца назад

If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the <script> block.

CVSS3: 5.4
redhat
3 месяца назад

If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the <script> block.

CVSS3: 6.1
nvd
3 месяца назад

If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the <script> block.

CVSS3: 6.1
debian
3 месяца назад

If a trusted template author were to write a <script> tag containing a ...

CVSS3: 6.1
github
3 месяца назад

If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the <script> block.

EPSS

Процентиль: 29%
0.00371
Низкий

6.1 Medium

CVSS3