CVE-2026-116582

A flaw was found in seroval. This vulnerability allows a remote attacker to conduct cross-site scripting XSS attacks by supplying crafted regular expression input to an application that serializes and embeds it into an HTML script element. Because the library fails to properly escape regular...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

CLEANSTART-2026-EY32574 Actions which insert URLs into the content attribute of HTML meta tags are not escaped

CVE-2026-27142 affects multiple packages. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. See references for individual vulnerability details...

PT-2026-126597

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from a use-after-free issue in the Layout: Images, Video, and HTML Frames component, which may lead to memory corruption or arbitrary code execution...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from post-free reuse in the DOM: Core & HTML...

ROS-20261027-73-0097

The vulnerability in the DigitalCredentials component of Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

ROS-20261027-73-0103

The vulnerability in the Metrics component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability allows a remote attacker to trigger a denial-of-service condition by using a specially crafted HTML page...

Google Chrome Vulnerability: CVE-2026-118335

Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-126352

SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject HTML via unescaped cstate parameters in Special:FacetedSearch. Attackers can craft URLs with q, a matching crc32 csum or filtered=1, and cstate values...

Google Chrome permission and access control issue vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a vulnerability related to permission escalation and access control. This issue stems from improper V8 access control and may allow remote attackers to read memory via specially crafted HTML pages...

Semantic MediaWiki cross-site scripting vulnerability

Semantic MediaWiki versions from 4.2.0 up to but including 7.3.1 contain a cross-site scripting vulnerability. This vulnerability arises because authenticated configuration or architecture editors can inject HTML via the FacetedSearch exploration-link tag. The ExploreListBuilder::buildHTML functi...

Semantic MediaWiki cross-site scripting vulnerability

Semantic MediaWiki versions from 3.1.0 up to and including 7.3.1 contain a cross-site scripting vulnerability. This vulnerability arises because authenticated schema editors with smw-schemaedit privileges can inject HTML via schema descriptions. The unescaped HTML is then passed to Html::rawEleme...

PT-2026-138558

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

PT-2026-138562

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

PT-2026-138556

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

PT-2026-138521

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

PT-2026-138548

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

PT-2026-138528

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...