Количество 29
Количество 29
BDU:2026-07954
Уязвимость языка программирования Go, связанная с непринятием мер по нейтрализации специальных элементов, позволяющая нарушителю проводить межсайтовые сценарные атаки
ROS-20260710-80-0012
Уязвимость mimir
ROS-20260710-73-0012
Уязвимость mimir
ROS-20260622-80-0036
Уязвимость golang
ROS-20260622-73-0030
Уязвимость golang
CVE-2026-39823
CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS.
CVE-2026-39823
CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS.
CVE-2026-39823
CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS.
CVE-2026-39823
Bypass of meta content URL escaping causes XSS in html/template
CVE-2026-39823
CVE-2026-27142 fixed a vulnerability in which URLs were not correctly ...
GHSA-2283-wf8c-rw8r
CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS.
ALT-PU-2026-7580
ALT-PU-2026-7580: package `golang` update to version 1.26.3-alt1
ALT-PU-2026-15350
ALT-PU-2026-15350: package `golang` update to version 1.26.7-alt0.p10.1
openSUSE-SU-2026:20763-1
Security update for go1.25
openSUSE-SU-2026:20762-1
Security update for go1.26
SUSE-SU-2026:2093-1
Security update for go1.25-openssl
SUSE-SU-2026:2092-1
Security update for go1.26-openssl
SUSE-SU-2026:2079-1
Security update for go1.25-openssl
SUSE-SU-2026:2078-1
Security update for go1.26-openssl
SUSE-SU-2026:1862-1
Security update for go1.25
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-07954 Уязвимость языка программирования Go, связанная с непринятием мер по нейтрализации специальных элементов, позволяющая нарушителю проводить межсайтовые сценарные атаки | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | ROS-20260710-80-0012 Уязвимость mimir | CVSS3: 6.1 | 0% Низкий | 4 месяца назад |
| ROS-20260710-73-0012 Уязвимость mimir | CVSS3: 6.1 | 0% Низкий | 4 месяца назад |
| ROS-20260622-80-0036 Уязвимость golang | CVSS3: 6.1 | 0% Низкий | 4 месяца назад |
| ROS-20260622-73-0030 Уязвимость golang | CVSS3: 6.1 | 0% Низкий | 4 месяца назад |
 | CVE-2026-39823 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-39823 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-39823 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-39823 Bypass of meta content URL escaping causes XSS in html/template | 0% Низкий | 6 месяцев назад | |
| CVE-2026-39823 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly ... | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
| GHSA-2283-wf8c-rw8r CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
| ALT-PU-2026-7580 ALT-PU-2026-7580: package `golang` update to version 1.26.3-alt1 | CVSS3: 9.8 | 5 месяцев назад | |
| ALT-PU-2026-15350 ALT-PU-2026-15350: package `golang` update to version 1.26.7-alt0.p10.1 | CVSS3: 10 | около 2 месяцев назад | |
 | openSUSE-SU-2026:20763-1 Security update for go1.25 | 6 месяцев назад | ||
| openSUSE-SU-2026:20762-1 Security update for go1.26 | 6 месяцев назад | ||
| SUSE-SU-2026:2093-1 Security update for go1.25-openssl | 5 месяцев назад | ||
| SUSE-SU-2026:2092-1 Security update for go1.26-openssl | 5 месяцев назад | ||
| SUSE-SU-2026:2079-1 Security update for go1.25-openssl | 5 месяцев назад | ||
| SUSE-SU-2026:2078-1 Security update for go1.26-openssl | 5 месяцев назад | ||
| SUSE-SU-2026:1862-1 Security update for go1.25 | 6 месяцев назад |
Уязвимостей на страницу