Количество 23
Количество 23
CVE-2026-27142
Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
CVE-2026-27142
Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
CVE-2026-27142
Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
CVE-2026-27142
URLs in meta content attribute actions are not escaped in html/template
CVE-2026-27142
Actions which insert URLs into the content attribute of HTML meta tags ...
GHSA-j4j7-vw47-rhfq
Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
BDU:2026-04129
Уязвимость модуля html/template языка программирования Go, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)
ROS-20260710-73-0028
Уязвимость mimir
ROS-20260327-73-0015
Уязвимость golang
openSUSE-SU-2026:20496-1
Security update for go1.25
SUSE-SU-2026:0875-1
Security update for go1.25
openSUSE-SU-2026:21324-1
Security update for go1.25
openSUSE-SU-2026:20537-1
Security update for go1.26-openssl
openSUSE-SU-2026:20342-1
Security update for go1.26
SUSE-SU-2026:2817-1
Security update for go1.25
SUSE-SU-2026:0993-1
Security update for go1.26-openssl
SUSE-SU-2026:0977-1
Security update for go1.25-openssl
SUSE-SU-2026:0976-1
Security update for go1.26-openssl
SUSE-SU-2026:0947-1
Security update for go1.25-openssl
SUSE-SU-2026:0876-1
Security update for go1.26
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-27142 Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0. | CVSS3: 6.1 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-27142 Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0. | CVSS3: 5.4 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-27142 Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0. | CVSS3: 6.1 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-27142 URLs in meta content attribute actions are not escaped in html/template | 0% Низкий | 5 месяцев назад | |
| CVE-2026-27142 Actions which insert URLs into the content attribute of HTML meta tags ... | CVSS3: 6.1 | 0% Низкий | 5 месяцев назад |
| GHSA-j4j7-vw47-rhfq Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0. | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
 | BDU:2026-04129 Уязвимость модуля html/template языка программирования Go, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS) | CVSS3: 6.1 | 0% Низкий | 5 месяцев назад |
 | ROS-20260710-73-0028 Уязвимость mimir | CVSS3: 6.1 | 0% Низкий | 21 день назад |
| ROS-20260327-73-0015 Уязвимость golang | CVSS3: 6.1 | 0% Низкий | 4 месяца назад |
 | openSUSE-SU-2026:20496-1 Security update for go1.25 | 4 месяца назад | ||
| SUSE-SU-2026:0875-1 Security update for go1.25 | 5 месяцев назад | ||
| openSUSE-SU-2026:21324-1 Security update for go1.25 | 17 дней назад | ||
| openSUSE-SU-2026:20537-1 Security update for go1.26-openssl | 4 месяца назад | ||
| openSUSE-SU-2026:20342-1 Security update for go1.26 | 5 месяцев назад | ||
| SUSE-SU-2026:2817-1 Security update for go1.25 | 21 день назад | ||
| SUSE-SU-2026:0993-1 Security update for go1.26-openssl | 4 месяца назад | ||
| SUSE-SU-2026:0977-1 Security update for go1.25-openssl | 4 месяца назад | ||
| SUSE-SU-2026:0976-1 Security update for go1.26-openssl | 4 месяца назад | ||
| SUSE-SU-2026:0947-1 Security update for go1.25-openssl | 4 месяца назад | ||
| SUSE-SU-2026:0876-1 Security update for go1.26 | 5 месяцев назад |
Уязвимостей на страницу