go1.25-1.25.13-1.1 on GA media (moderate)

go1.25-1.25.13-1.1 on GA media Announcement ID: openSUSE-SU-2026:11516-1 Rating: moderate Cross-References: CVE-2026-33818 CVE-2026-39821 CVE-2026-56853 CVE-2026-56858 CVE-2026-56859 CVE-2026-56860 CVE-2026-56862 CVE-2026-56864 CVE-2026-56865 CVSS scores: CVE-2026-39821 SUSE : 7.4...

CVE-2026-56858 vulnerabilities

Vulnerabilities for packages: cadence-fips, buildkitd, cass-operator-fips, kubo, crossplane-provider-azure-netapp, grafana-pyroscope-fips, crossplane-provider-aws-mediastore, kratos, crossplane-provider-aws-monolith, k6-operator-fips, skaffold-fips, agentbeat-fips, eck-operator-fips, xeol,...

CVE-2026-56858 vulnerabilities

Vulnerabilities for packages: amass, cosign, kwok, conftest, crossplane-provider-aws-ec2, grafana-alloy, rancher-fleet, flyte, istio, kubescape, swagger, helm-mapkubeapis, k3s, bank-vaults, kuma, seaweedfs, temporal, helm-set-status, secrets-store-csi-driver, vexctl, terraform-provider-acme,...

CVE-2026-56858

creationtimestamp| type| source ---|---|--- 2026-08-14 12:01:07+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mt24dovar52y...

Linux Distros Unpatched Vulnerability : CVE-2026-56858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-56858

Previously, pathological inputs could close an unescaped / early, al...

CVE-2026-56858

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

UBUNTU-CVE-2026-56858

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-56858

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-56858 Fix Javascript regexp context tracking in html/template

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-56858

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-56858

Technical details about CVE-2026-56858 are not publicly available in the provided connected documents. Monitor for updates. The initial description notes that pathological inputs could close an unescaped '/' to inject content, potentially leading to XSS.