CVE-2026-56858

Опубликовано: 13 авг. 2026

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.

Ссылки

EPSS

Процентиль: 24%

0.0031

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVE-2026-56858

CVSS3: 6.1

ubuntu

2 месяца назад

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.

CVE-2026-56858

CVSS3: 8.1

redhat

2 месяца назад

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.

CVE-2026-56858

msrc

2 месяца назад

Fix Javascript regexp context tracking in html/template

CVE-2026-56858

CVSS3: 6.1

debian

2 месяца назад

Previously, pathological inputs could close an unescaped '/' early, al ...

ROS-20260921-80-0158

CVSS3: 6.1

redos

около 1 месяца назад

Уязвимость golang

EPSS

Процентиль: 24%

0.0031

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79