Поиск уязвимостей
Количество 148
Количество 148
ELSA-2026-26445
ELSA-2026-26445: podman security update (IMPORTANT)
ELSA-2026-24386
ELSA-2026-24386: podman security update (IMPORTANT)
ELSA-2026-19185
ELSA-2026-19185: grafana security update (IMPORTANT)
ELSA-2026-19184
ELSA-2026-19184: grafana-pcp security update (IMPORTANT)
ELSA-2026-19128
ELSA-2026-19128: yggdrasil-worker-package-manager security update (IMPORTANT)
ELSA-2026-19032
ELSA-2026-19032: buildah security update (IMPORTANT)
ELSA-2026-19031
ELSA-2026-19031: skopeo security update (IMPORTANT)
ELSA-2026-19027
ELSA-2026-19027: grafana security update (IMPORTANT)
ELSA-2026-19026
ELSA-2026-19026: grafana-pcp security update (IMPORTANT)
ELSA-2026-13671
ELSA-2026-13671: image-builder security update (IMPORTANT)
ELSA-2026-13643
ELSA-2026-13643: osbuild-composer security update (IMPORTANT)
ELSA-2026-13642
ELSA-2026-13642: image-builder security update (IMPORTANT)
ELSA-2026-11413
ELSA-2026-11413: yggdrasil security update (IMPORTANT)
ELSA-2026-11412
ELSA-2026-11412: yggdrasil-worker-package-manager security update (IMPORTANT)
BDU:2026-04127
Уязвимость функции url.Parse() компонента host/authority языка программирования Go, позволяющая нарушителю выполнить произвольный код
ALT-PU-2026-15350
ALT-PU-2026-15350: package `golang` update to version 1.26.7-alt0.p10.1
CVE-2026-27142
Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
CVE-2026-27142
Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
CVE-2026-27142
Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
CVE-2026-27142
URLs in meta content attribute actions are not escaped in html/template
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ELSA-2026-26445 ELSA-2026-26445: podman security update (IMPORTANT) | 1% Низкий | 5 месяцев назад | |
| ELSA-2026-24386 ELSA-2026-24386: podman security update (IMPORTANT) | 1% Низкий | 4 месяца назад | |
| ELSA-2026-19185 ELSA-2026-19185: grafana security update (IMPORTANT) | 1% Низкий | 5 месяцев назад | |
| ELSA-2026-19184 ELSA-2026-19184: grafana-pcp security update (IMPORTANT) | 1% Низкий | 5 месяцев назад | |
| ELSA-2026-19128 ELSA-2026-19128: yggdrasil-worker-package-manager security update (IMPORTANT) | 1% Низкий | 4 месяца назад | |
| ELSA-2026-19032 ELSA-2026-19032: buildah security update (IMPORTANT) | 1% Низкий | 4 месяца назад | |
| ELSA-2026-19031 ELSA-2026-19031: skopeo security update (IMPORTANT) | 1% Низкий | 4 месяца назад | |
| ELSA-2026-19027 ELSA-2026-19027: grafana security update (IMPORTANT) | 1% Низкий | 4 месяца назад | |
| ELSA-2026-19026 ELSA-2026-19026: grafana-pcp security update (IMPORTANT) | 1% Низкий | 4 месяца назад | |
| ELSA-2026-13671 ELSA-2026-13671: image-builder security update (IMPORTANT) | 1% Низкий | 6 месяцев назад | |
| ELSA-2026-13643 ELSA-2026-13643: osbuild-composer security update (IMPORTANT) | 1% Низкий | 6 месяцев назад | |
| ELSA-2026-13642 ELSA-2026-13642: image-builder security update (IMPORTANT) | 1% Низкий | 6 месяцев назад | |
| ELSA-2026-11413 ELSA-2026-11413: yggdrasil security update (IMPORTANT) | 1% Низкий | 7 месяцев назад | |
| ELSA-2026-11412 ELSA-2026-11412: yggdrasil-worker-package-manager security update (IMPORTANT) | 1% Низкий | 7 месяцев назад | |
 | BDU:2026-04127 Уязвимость функции url.Parse() компонента host/authority языка программирования Go, позволяющая нарушителю выполнить произвольный код | CVSS3: 7.5 | 1% Низкий | 8 месяцев назад |
| ALT-PU-2026-15350 ALT-PU-2026-15350: package `golang` update to version 1.26.7-alt0.p10.1 | CVSS3: 10 | около 2 месяцев назад | |
 | CVE-2026-27142 Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0. | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-27142 Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0. | CVSS3: 5.4 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-27142 Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0. | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-27142 URLs in meta content attribute actions are not escaped in html/template | CVSS3: 7.5 | 0% Низкий | 8 месяцев назад |
Уязвимостей на страницу