Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html

🗓️ 27 May 2026 08:09:30Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 15 Views

Incorrect handling of HTML elements in foreign content in golang.org/x/net/html.

Reporter	Title	Published	Views	Family All 1428
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in net	2 Jul 202612:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (June 2026 - Part 2 of 2)	7 Jul 202607:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Liberty Operator is affected by multiple vulnerabilities	24 Jun 202616:24	–	ibm
ATTACKERKB	CVE-2026-42502	22 May 202615:01	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : nerdctl (ALAS2023-2026-1788)	8 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : docker (ALAS2023-2026-1835)	12 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-1847)	22 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : soci-snapshotter (ALAS2023-2026-1884)	22 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : credentials-fetcher (ALAS2023-2026-1885)	22 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : runfinch-finch (ALAS2023-2026-1886)	22 Jun 202600:00	–	nessus

Vulners

Node

microsoft azl3_keda_2.14.1-15Range<2.14.1-14

OR

microsoft azl3_gh_2.62.0-18Range<2.62.0-17

OR

microsoft azl3_telegraf_1.31.0-23Range<1.31.0-23

OR

microsoft azl3_multus_4.0.2-9Range<4.0.2-9

OR

microsoft azl3_gh_2.62.0-17Range<2.62.0-17

OR

microsoft azl3_dasel_2.8.1-4Range<2.8.1-4

OR

microsoft azl3_cni-plugins_1.4.0-6Range<1.4.0-6

OR

microsoft azl3_cf-cli_8.7.11-7Range<8.7.11-7

OR

microsoft azl3_keda_2.14.1-14Range<2.14.1-14

OR

microsoft azl3_containerd2_2.2.4-4Range<2.2.4-4

OR

microsoft azl3_cloud-provider-kubevirt_0.5.1-5Range<0.5.1-5

OR

microsoft azl3_multus_4.0.2-8Range<4.0.2-9

OR

microsoft azl3_docker-buildx_0.14.0-13Range<0.14.0-15

OR

microsoft azl3_dasel_2.8.1-3Range<2.8.1-4

OR

microsoft azl3_containerd2_2.2.4-2Range<2.2.4-3

OR

microsoft azl3_telegraf_1.31.0-22Range<1.31.0-23

OR

microsoft azl3_keda_2.14.1-13Range<2.14.1-14

OR

microsoft azl3_gh_2.62.0-16Range<2.62.0-17

OR

microsoft azl3_docker-compose_2.27.0-11Range<2.27.0-13

OR

microsoft azl3_cloud-provider-kubevirt_0.5.1-4Range<0.5.1-5

OR

microsoft azl3_cf-cli_8.7.11-6Range<8.7.11-7

OR

microsoft azl3_cni-plugins_1.4.0-5Range<1.4.0-6

OR

microsoft azl3_sriov-network-device-plugin_3.7.0-6Range<3.7.0-6

OR

microsoft azl3_kubernetes_1.30.10-25Range<1.30.10-25

OR

microsoft azl3_kubernetes_1.30.10-23Range<1.30.10-25

OR

microsoft azl3_sriov-network-device-plugin_3.7.0-5Range<3.7.0-6

OR

microsoft azl3_prometheus-adapter_0.12.0-5Range<0.12.0-6

OR

microsoft azl3_packer_1.9.5-13Range<1.9.5-14

OR

microsoft azl3_kubevirt_1.7.1-2Range<1.7.1-5

OR

microsoft azl3_kube-vip-cloud-provider_0.0.10-5Range<0.0.10-6

OR

microsoft azl3_influxdb_2.7.5-15Range<2.7.5-17

OR

microsoft azl3_cri-tools_1.32.0-4Range<1.32.0-6

OR

microsoft azl3_containerized-data-importer_1.62.0-3Range<1.62.0-5

OR

microsoft azl3_cert-manager_1.12.15-6Range<1.12.15-8

OR

microsoft azl3_application-gateway-kubernetes-ingress_1.7.7-3Range<1.7.7-4

06 Jul 2026 21:41Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.1

EPSS0.00178

SSVC

Html elements Foreign content Incorrect handling Golang html parser Security issue