DEBIAN-CVE-2026-25680

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87338 CVE-2026-25680 affecting package yq 4.45.1-1

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87143 CVE-2026-25680 affecting package azl-otel-collector 0.127.0-1

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87591 CVE-2026-25680 affecting package dasel for versions less than 2.8.1-4

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87459 CVE-2026-25680 affecting package cf-cli for versions less than 8.7.11-7

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87966 CVE-2026-25681 affecting package kubevirt for versions less than 1.7.1-7

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87705 CVE-2026-25680 affecting package docker-compose for versions less than 2.27.0-12

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87242 CVE-2026-25680 affecting package cri-o 1.30.1-1

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87540 CVE-2026-25681 affecting package containerd2 for versions less than 2.2.4-4

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87414 CVE-2026-25680 affecting package cert-manager for versions less than 1.12.15-9

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87570 CVE-2026-25680 affecting package cri-tools for versions less than 1.32.0-6

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

DEBIAN-CVE-2026-25681

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87888 CVE-2026-25680 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87314 CVE-2026-25681 affecting package podman 5.6.1-9

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-88293 CVE-2026-25680 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87287 CVE-2026-25680 affecting package podman 5.6.1-9

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87435 CVE-2026-25681 affecting package cert-manager for versions less than 1.12.15-9

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87221 CVE-2026-25681 affecting package cri-o 1.30.1-1

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87813 CVE-2026-25680 affecting package influxdb for versions less than 2.7.5-17

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87600 CVE-2026-25681 affecting package dasel for versions less than 2.8.1-4

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...