Поиск уязвимостей
Количество 34
Количество 34
GHSA-cg87-vwwh-xvgj
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
CVE-2026-42506
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
CVE-2026-42506
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
CVE-2026-42506
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
CVE-2026-42506
Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html
CVE-2026-42506
Parsing arbitrary HTML which is then rendered using Render can result ...
ROS-20260908-80-0039
Уязвимость golang-x-net
ROS-20260908-73-0033
Уязвимость golang-x-net
BDU:2026-15306
Уязвимость пакета golang-x-net языка программирования Golang, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный код
ROS-20261106-80-0030
Уязвимость alloy
openSUSE-SU-2026:20984-1
Security update for grafana
openSUSE-SU-2026:21262-1
Security update for hauler
openSUSE-SU-2026:20963-1
Security update for neonmodem
SUSE-SU-2026:2285-1
Security update for yq
openSUSE-SU-2026:21367-1
Security update for lux
openSUSE-SU-2026:20892-1
Security update for yq
SUSE-SU-2026:3630-1
Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6
openSUSE-SU-2026:21281-1
Security update for cosign
SUSE-SU-2026:2827-1
Security update for cosign
openSUSE-SU-2026:21120-1
Security update for mcphost
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-cg87-vwwh-xvgj Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-42506 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-42506 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-42506 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-42506 Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
| CVE-2026-42506 Parsing arbitrary HTML which is then rendered using Render can result ... | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | ROS-20260908-80-0039 Уязвимость golang-x-net | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-73-0033 Уязвимость golang-x-net | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
 | BDU:2026-15306 Уязвимость пакета golang-x-net языка программирования Golang, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный код | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
| ROS-20261106-80-0030 Уязвимость alloy | CVSS3: 6.1 | 0% Низкий | 7 дней назад |
 | openSUSE-SU-2026:20984-1 Security update for grafana | 5 месяцев назад | ||
| openSUSE-SU-2026:21262-1 Security update for hauler | 4 месяца назад | ||
| openSUSE-SU-2026:20963-1 Security update for neonmodem | 5 месяцев назад | ||
| SUSE-SU-2026:2285-1 Security update for yq | 5 месяцев назад | ||
| openSUSE-SU-2026:21367-1 Security update for lux | 4 месяца назад | ||
| openSUSE-SU-2026:20892-1 Security update for yq | 5 месяцев назад | ||
| SUSE-SU-2026:3630-1 Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6 | 3 месяца назад | ||
| openSUSE-SU-2026:21281-1 Security update for cosign | 4 месяца назад | ||
| SUSE-SU-2026:2827-1 Security update for cosign | 4 месяца назад | ||
| openSUSE-SU-2026:21120-1 Security update for mcphost | 5 месяцев назад |
Уязвимостей на страницу