Уязвимость пакета golang-x-net языка программирования Golang, связанная с некорректным ограничением визуализированных слоев пользовательского интерфейса, позволяющая нарушителю провести атаку типа clickjacking («захват клика»)

ALT-PU-2026-9801: package `mimir` update to version 3.1.1-alt1

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html

Parsing arbitrary HTML which is then rendered using Render can result ...

Уязвимость golang-x-net

Уязвимость golang-x-net

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

Important: grafana security update

Important: grafana security update

Important: image-builder security update

Important: image-builder security update

ELSA-2026-67139-0: image-builder security update (IMPORTANT)

ELSA-2026-67138-0: image-builder security update (IMPORTANT)

Security update for grafana

Important: osbuild-composer security update

Security update for hauler

Security update for neonmodem