Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

25 matches found

osv_cleanstart
osv_cleanstart•added 2026/10/23 12:36 a.m.•9 views

CLEANSTART-2026-RP71173 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

Security vulnerability affects the argo-cd package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...

6.1CVSS7AI score0.00314EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/08 12:43 a.m.•13 views

CLEANSTART-2026-FK00511 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

CVE-2026-39823 affects multiple packages. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. See references for individual vulnerability details...

6.1CVSS7AI score0.00314EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/06 12:36 a.m.•15 views

CLEANSTART-2026-MX72137 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

Security vulnerability affects the temporal-server package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...

6.1CVSS7AI score0.00314EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/01 6:47 a.m.•18 views

CLEANSTART-2026-GO32360 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

Security vulnerability affects the cri-tools package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...

6.1CVSS7.1AI score0.00341EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/01 12:35 a.m.•12 views

CLEANSTART-2026-EF65373 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

CVE-2026-39823 affects multiple packages. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. See references for individual vulnerability details...

9.8CVSS7.1AI score0.00341EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/09/30 8:21 p.m.•12 views

CLEANSTART-2026-PB65186 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

Security vulnerability affects the crane package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...

6.1CVSS7AI score0.00314EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/09/30 12:36 a.m.•20 views

CLEANSTART-2026-MY04156 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

Security vulnerability affects the minio-operator package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...

9.8CVSS7AI score0.00314EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/09/26 12:37 a.m.•20 views

CLEANSTART-2026-PR31494 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

Security vulnerability affects the loki package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...

9.8CVSS7AI score0.00341EPSS
SaveExploits0References3
CVE
CVE•added 2026/08/05 6:00 a.m.•77 views

CVE-2026-16604

The Passster (also known as Content Protector ) WordPress plugin versions prior to 4.3.6 is vulnerable to unauthenticated protected content disclosure . The root cause is that the plugin outputs password-protected block content in the public page response before performing password verification. ...

7.5CVSS5.9AI score0.00434EPSS
SaveExploits0References1
osv_suse
osv_suse•added 2026/07/09 5:08 p.m.•17 views

SUSE-SU-2026:2817-1 Security update for go1.25

This update for go1.25 fixes the following issues - Update to version go1.25.12 bsc1244485. - CVE-2026-25679: net/url: reject IPv6 literal not at start of host bsc1259264. - CVE-2026-27139: os: FileInfo can escape from a Root bsc1259268. - CVE-2026-27142: html/template: URLs in meta content...

7.8CVSS6AI score0.00774EPSS
SaveExploits0References14
RedHat Linux
RedHat Linux•added 2026/06/01 12:55 a.m.•32 views

html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

A flaw was found in the html/template package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign = within a URL's content attribute inside a tag. This improper escaping could lead to Cross-Site Scripting XSS, allowing the attacker to...

6.1CVSS7.1AI score0.00314EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus•added 2026/05/27 12:00 a.m.•36 views

Amazon Linux 2 : oci-add-hooks, --advisory ALAS2ECS-2026-118 (ALASECS-2026-118)

The version of oci-add-hooks installed on the remote host is prior to 0-0.10.20200504git325a340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-118 advisory. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a...

7.5CVSS6.8AI score0.00875EPSS
SaveExploits0References16
osv_bit
osv_bit•added 2026/05/11 5:44 a.m.•18 views

BIT-GOLANG-2026-39823 Bypass of meta content URL escaping causes XSS in html/template

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the attribute, the escaper would fail to similarly escape it, leading to XSS...

6.1CVSS7.1AI score0.00341EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE•added 2026/05/09 2:43 a.m.•25 views

SUSE CVE-2026-39823

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the attribute, the escaper would fail to similarly escape it, leading to XSS...

6.1CVSS7AI score0.00341EPSS
SaveExploits0References17
osv_debian
osv_debian•added 2026/05/07 8:16 p.m.•46 views

DEBIAN-CVE-2026-39823

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the attribute, the escaper would fail to similarly escape it, leading to XSS...

6.1CVSS7AI score0.00314EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve•added 2026/05/07 8:16 p.m.•25 views

CVE-2026-39823

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the attribute, the escaper would fail to similarly escape it, leading to XSS...

6.1CVSS7.1AI score0.00341EPSS
SaveExploits0References7
Mend
Mend•added 2026/05/07 7:41 p.m.•7 views

CVE-2026-39823

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the attribute, the escaper would fail to similarly escape it, leading to XSS...

6.1CVSS7AI score0.00341EPSS
SaveExploits0References7
osv_cve
osv_cve•added 2026/05/07 7:41 p.m.•31 views

CVE-2026-39823 Bypass of meta content URL escaping causes XSS in html/template

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the attribute, the escaper would fail to similarly escape it, leading to XSS...

6.1CVSS6.4AI score
SaveExploits0References7
AlpineLinux
AlpineLinux•added 2026/05/07 7:41 p.m.•72 views

CVE-2026-39823

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the attribute, the escaper would fail to similarly escape it, leading to XSS...

6.1CVSS7.1AI score0.00341EPSS
SaveExploits0
osv_go
osv_go•added 2026/05/07 7:21 p.m.•41 views

GO-2026-4982 Bypass of meta content URL escaping causes XSS in html/template

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the attribute, the escaper would fail to similarly escape it, leading to XSS...

6.1CVSS7.1AI score0.00341EPSS
SaveExploits0References3
Rows per page
Query Builder