818 matches found
AZL-87335 CVE-2026-27136 affecting package yq 4.45.1-1
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87519 CVE-2026-42502 affecting package cni-plugins for versions less than 1.4.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87819 CVE-2026-27136 affecting package influxdb for versions less than 2.7.5-17
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87372 CVE-2026-42502 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-5
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87582 CVE-2026-27136 affecting package cri-tools for versions less than 1.32.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87963 CVE-2026-25680 affecting package kubevirt for versions less than 1.7.1-7
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87158 CVE-2026-25681 affecting package azl-otel-collector 0.127.0-1
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87338 CVE-2026-25680 affecting package yq 4.45.1-1
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87861 CVE-2026-25681 affecting package keda for versions less than 2.14.1-14
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87966 CVE-2026-25681 affecting package kubevirt for versions less than 1.7.1-7
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87480 CVE-2026-25681 affecting package cf-cli for versions less than 8.7.11-7
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87903 CVE-2026-25680 affecting package kubernetes for versions less than 1.30.10-25
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87344 CVE-2026-25681 affecting package yq 4.45.1-1
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87747 CVE-2026-25681 affecting package gh for versions less than 2.62.0-17
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87756 CVE-2026-25680 affecting package gh for versions less than 2.62.0-17
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
DEBIAN-CVE-2026-25680
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87459 CVE-2026-25680 affecting package cf-cli for versions less than 8.7.11-7
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87540 CVE-2026-25681 affecting package containerd2 for versions less than 2.2.4-4
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
