21 matches found
CLEANSTART-2026-RB66054 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
Security vulnerability affects the argo-cd package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...
CLEANSTART-2026-DE84395 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
Security vulnerability affects the grafana-fips package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...
CLEANSTART-2026-TZ31810 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
Security vulnerability affects the external-dns package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...
PT-2026-122833
Security vulnerability affects the external-dns package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...
CLSA-2026-1791804836 golang: Fix of CVE-2026-32289
CVE-2026-32289: html/template - track JS template literal brace depth across if/range branches and include it in context comparison and mangling, so actions inside JS template literals are no longer escaped incorrectly, which could lead to XSS...
Rocky Linux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1791818373)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791818373 advisory. - Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content whe...
AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2026:1791804836)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791804836 advisory. - Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when...
AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1791818373)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791818373 advisory. - Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when...
CLEANSTART-2026-FF43574 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
CVE-2026-32289 affects multiple packages. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. See references for individual vulnerability details...
CLEANSTART-2026-GZ31996 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
Security vulnerability affects the temporal-server package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...
CLEANSTART-2026-HM16976 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
Security vulnerability affects the docker-cli-buildx package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...
CLEANSTART-2026-BX15476 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
CVE-2026-32289 affects multiple packages. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. See references for individual vulnerability details...
CLEANSTART-2026-QB75766 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
Security vulnerability affects the containerd package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...
CLEANSTART-2026-DP89465 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
Security vulnerability affects the minio-operator package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...
html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals
A flaw was found in the html/template package. This vulnerability arises from improper tracking of context and brace depth within JavaScript JS template literals. A remote attacker could exploit these issues to cause content to be incorrectly or improperly escaped, leading to Cross-Site Scripting...
html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals
A flaw was found in the html/template package. This vulnerability arises from improper tracking of context and brace depth within JavaScript JS template literals. A remote attacker could exploit these issues to cause content to be incorrectly or improperly escaped, leading to Cross-Site Scripting...
html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals
A flaw was found in the html/template package. This vulnerability arises from improper tracking of context and brace depth within JavaScript JS template literals. A remote attacker could exploit these issues to cause content to be incorrectly or improperly escaped, leading to Cross-Site Scripting...
AZL-98763 CVE-2026-32289 affecting package golang 1.27.1-1
Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. Additionally template actions within JS template literals did not properly track the brace depth, leading to incorrect escaping being...
CVE-2026-32289
Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. Additionally template actions within JS template literals did not properly track the brace depth, leading to incorrect escaping being...
CVE-2026-32289: Improper Neutralization of Input During Web Page Generation
Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. Additionally template actions within JS template literals did not properly track the brace depth, leading to incorrect escaping being...