CLEANSTART-2026-US17049 Security fixes in fluent-operator-fips 3.10.0-r3

Package fluent-operator-fips version 3.10.0-r3 fixes 10 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-DO56423 Security fixes in prometheus-statsd-exporter 0.29.0-r0

Package prometheus-statsd-exporter version 0.29.0-r0 fixes 9 vulnerabilities: CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...

CLEANSTART-2026-LR05303 Security fixes in argo-cd-fips 3.4.7-r3

Package argo-cd-fips version 3.4.7-r3 fixes 10 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

Security update for go1.26 (important)

openSUSE security update: security update for go1.26 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21593-1 Rating: important References: bsc1255111 bsc1266609 bsc1275024 bsc1275025 bsc1275026 bsc1275028 bsc1275029 bsc1275032 bsc1275033 bsc1275034...

go1.25-1.25.13-1.1 on GA media (moderate)

go1.25-1.25.13-1.1 on GA media Announcement ID: openSUSE-SU-2026:11516-1 Rating: moderate Cross-References: CVE-2026-33818 CVE-2026-39821 CVE-2026-56853 CVE-2026-56858 CVE-2026-56859 CVE-2026-56860 CVE-2026-56862 CVE-2026-56864 CVE-2026-56865 CVSS scores: CVE-2026-39821 SUSE : 7.4...

CVE-2026-56858 vulnerabilities

Vulnerabilities for packages: json-exporter, terraform-provider-azapi-fips, prometheus-alertmanager-fips, hubble-ui-backend-fips, pulumi-language-java, chronyexporter, crossplane-provider-aws-cloudcontrol-fips, crossplane-provider-aws-memorydb-fips, crossplane-provider-aws-configservice-fips,...

CVE-2026-56858 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, buildkitd, splunk-otel-collector, terraform-provider-sendgrid, dapr, net-kourier, cilium, grpcurl, certificate-transparency, crossplane-provider-aws-eks, helm, grafana-mimir, lvm-driver, src, nuclei, crossplane, zarf, kyverno-policy-reporter,...

CVE-2026-56858

creationtimestamp| type| source ---|---|--- 2026-08-14 12:01:07+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mt24dovar52y 2026-08-22 12:01:13+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mtoa3a3w4z2r...

Linux Distros Unpatched Vulnerability : CVE-2026-56858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-56858

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

UBUNTU-CVE-2026-56858

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-56858

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-56858

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-56858

Technical details about CVE-2026-56858 are not publicly available in the provided connected documents. Monitor for updates. The initial description notes that pathological inputs could close an unescaped '/' to inject content, potentially leading to XSS.

CVE-2026-56858

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-56858 Fix Javascript regexp context tracking in html/template

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...