801 matches found
AZL-87498 CVE-2026-25680 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-88110 CVE-2026-25681 affecting package multus for versions less than 4.0.2-9
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87492 CVE-2026-25681 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87221 CVE-2026-25681 affecting package cri-o 1.30.1-1
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87600 CVE-2026-25681 affecting package dasel for versions less than 2.8.1-4
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87516 CVE-2026-25681 affecting package cni-plugins for versions less than 1.4.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87537 CVE-2026-25680 affecting package containerd2 for versions less than 2.2.4-4
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87585 CVE-2026-25681 affecting package cri-tools for versions less than 1.32.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-88245 CVE-2026-25681 affecting package prometheus-adapter for versions less than 0.12.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87366 CVE-2026-25680 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-5
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87513 CVE-2026-25680 affecting package cni-plugins for versions less than 1.4.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-88344 CVE-2026-25680 affecting package telegraf for versions less than 1.31.0-23
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87612 CVE-2026-25681 affecting package docker-buildx for versions less than 0.14.0-15
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87561 CVE-2026-25680 affecting package containerized-data-importer for versions less than 1.62.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-88230 CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87882 CVE-2026-25681 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87858 CVE-2026-25680 affecting package keda for versions less than 2.14.1-14
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87918 CVE-2026-25681 affecting package kubernetes for versions less than 1.30.10-25
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...