Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Parsing arbitrary HTML which is then rendered using Render can result ...

Уязвимость golang-x-net

Уязвимость golang-x-net

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

Уязвимость пакета golang-x-net языка программирования Golang, связанная с некорректным ограничением визуализированных слоев пользовательского интерфейса, позволяющая нарушителю провести атаку типа clickjacking («захват клика»)

Important: image-builder security update

Important: image-builder security update

ELSA-2026-67139-0: image-builder security update (IMPORTANT)

ELSA-2026-67138-0: image-builder security update (IMPORTANT)

Security update for grafana

Important: osbuild-composer security update

Security update for hauler

Security update for neonmodem

Security update for yq

Important: osbuild-composer security update

ELSA-2026-66432-0: osbuild-composer security update (IMPORTANT)