Количество 48
Количество 48
GHSA-vvgc-356p-c3xw
golang.org/x/net vulnerable to Cross-site Scripting
CVE-2025-22872
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).
CVE-2025-22872
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).
CVE-2025-22872
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).
CVE-2025-22872
Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net
CVE-2025-22872
The tokenizer incorrectly interprets tags with unquoted attribute valu ...
SUSE-SU-2025:02515-1
Security update for kubernetes1.18
SUSE-SU-2025:02383-2
Security update for kubernetes1.26
SUSE-SU-2025:02383-1
Security update for kubernetes1.26
SUSE-SU-2025:02366-2
Security update for docker
SUSE-SU-2025:02366-1
Security update for docker
SUSE-SU-2025:02351-1
Security update for kubernetes1.25
SUSE-SU-2025:02350-2
Security update for kubernetes1.28
SUSE-SU-2025:02350-1
Security update for kubernetes1.28
SUSE-SU-2025:02336-1
Security update for kubernetes1.27
SUSE-SU-2025:02121-1
Security update for helm
SUSE-SU-2025:01945-1
Security update for kubernetes-old
SUSE-SU-2025:01941-1
Security update for kubernetes1.24
SUSE-SU-2025:01940-2
Security update for kubernetes1.23
SUSE-SU-2025:01940-1
Security update for kubernetes1.23
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-vvgc-356p-c3xw golang.org/x/net vulnerable to Cross-site Scripting | 1% Низкий | больше 1 года назад | |
 | CVE-2025-22872 The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts). | CVSS3: 6.5 | 1% Низкий | больше 1 года назад |
 | CVE-2025-22872 The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts). | CVSS3: 6.5 | 1% Низкий | больше 1 года назад |
 | CVE-2025-22872 The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts). | CVSS3: 6.5 | 1% Низкий | больше 1 года назад |
 | CVE-2025-22872 Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net | CVSS3: 6.5 | 1% Низкий | больше 1 года назад |
| CVE-2025-22872 The tokenizer incorrectly interprets tags with unquoted attribute valu ... | CVSS3: 6.5 | 1% Низкий | больше 1 года назад |
 | SUSE-SU-2025:02515-1 Security update for kubernetes1.18 | 1% Низкий | около 1 года назад | |
| SUSE-SU-2025:02383-2 Security update for kubernetes1.26 | 1% Низкий | 12 месяцев назад | |
| SUSE-SU-2025:02383-1 Security update for kubernetes1.26 | 1% Низкий | около 1 года назад | |
| SUSE-SU-2025:02366-2 Security update for docker | 1% Низкий | около 1 года назад | |
| SUSE-SU-2025:02366-1 Security update for docker | 1% Низкий | около 1 года назад | |
| SUSE-SU-2025:02351-1 Security update for kubernetes1.25 | 1% Низкий | около 1 года назад | |
| SUSE-SU-2025:02350-2 Security update for kubernetes1.28 | 1% Низкий | около 1 года назад | |
| SUSE-SU-2025:02350-1 Security update for kubernetes1.28 | 1% Низкий | около 1 года назад | |
| SUSE-SU-2025:02336-1 Security update for kubernetes1.27 | 1% Низкий | около 1 года назад | |
| SUSE-SU-2025:02121-1 Security update for helm | 1% Низкий | около 1 года назад | |
| SUSE-SU-2025:01945-1 Security update for kubernetes-old | 1% Низкий | около 1 года назад | |
| SUSE-SU-2025:01941-1 Security update for kubernetes1.24 | 1% Низкий | около 1 года назад | |
| SUSE-SU-2025:01940-2 Security update for kubernetes1.23 | 1% Низкий | 12 месяцев назад | |
| SUSE-SU-2025:01940-1 Security update for kubernetes1.23 | 1% Низкий | около 1 года назад |
Уязвимостей на страницу