Поиск уязвимостей
Количество 29
Количество 29
BDU:2026-04129
Уязвимость модуля html/template языка программирования Go, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)
ROS-20260710-80-0028
Уязвимость mimir
ROS-20260710-73-0028
Уязвимость mimir
ROS-20260327-73-0015
Уязвимость golang
ALT-PU-2026-4231
ALT-PU-2026-4231: package `golang` update to version 1.25.8-alt1
ALT-PU-2026-5657
ALT-PU-2026-5657: package `mimir` update to version 3.0.5-alt1
CVE-2026-27142
Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
CVE-2026-27142
Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
CVE-2026-27142
Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
CVE-2026-27142
URLs in meta content attribute actions are not escaped in html/template
CVE-2026-27142
Actions which insert URLs into the content attribute of HTML meta tags ...
ROS-20260327-80-0015
Уязвимость golang
GHSA-j4j7-vw47-rhfq
Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
ALT-PU-2026-7580
ALT-PU-2026-7580: package `golang` update to version 1.26.3-alt1
openSUSE-SU-2026:20496-1
Security update for go1.25
SUSE-SU-2026:0875-1
Security update for go1.25
ALT-PU-2026-15350
ALT-PU-2026-15350: package `golang` update to version 1.26.7-alt0.p10.1
openSUSE-SU-2026:21324-1
Security update for go1.25
openSUSE-SU-2026:20537-1
Security update for go1.26-openssl
openSUSE-SU-2026:20342-1
Security update for go1.26
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-04129 Уязвимость модуля html/template языка программирования Go, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS) | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
 | ROS-20260710-80-0028 Уязвимость mimir | CVSS3: 6.1 | 0% Низкий | 4 месяца назад |
| ROS-20260710-73-0028 Уязвимость mimir | CVSS3: 6.1 | 0% Низкий | 4 месяца назад |
| ROS-20260327-73-0015 Уязвимость golang | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
| ALT-PU-2026-4231 ALT-PU-2026-4231: package `golang` update to version 1.25.8-alt1 | CVSS3: 7.5 | 8 месяцев назад | |
| ALT-PU-2026-5657 ALT-PU-2026-5657: package `mimir` update to version 3.0.5-alt1 | CVSS3: 9.1 | 7 месяцев назад | |
 | CVE-2026-27142 Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0. | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-27142 Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0. | CVSS3: 5.4 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-27142 Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0. | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-27142 URLs in meta content attribute actions are not escaped in html/template | CVSS3: 7.5 | 0% Низкий | 8 месяцев назад |
| CVE-2026-27142 Actions which insert URLs into the content attribute of HTML meta tags ... | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
| ROS-20260327-80-0015 Уязвимость golang | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
| GHSA-j4j7-vw47-rhfq Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0. | CVSS3: 7.5 | 0% Низкий | 8 месяцев назад |
| ALT-PU-2026-7580 ALT-PU-2026-7580: package `golang` update to version 1.26.3-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
 | openSUSE-SU-2026:20496-1 Security update for go1.25 | 7 месяцев назад | ||
| SUSE-SU-2026:0875-1 Security update for go1.25 | 8 месяцев назад | ||
| ALT-PU-2026-15350 ALT-PU-2026-15350: package `golang` update to version 1.26.7-alt0.p10.1 | CVSS3: 10 | около 2 месяцев назад | |
| openSUSE-SU-2026:21324-1 Security update for go1.25 | 4 месяца назад | ||
| openSUSE-SU-2026:20537-1 Security update for go1.26-openssl | 7 месяцев назад | ||
| openSUSE-SU-2026:20342-1 Security update for go1.26 | 8 месяцев назад |
Уязвимостей на страницу