Lucene search
+L

3 matches found

OSV
OSV
added 2026/04/15 6:16 a.m.12 views

UBUNTU-CVE-2026-5160

Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting XSS due to improper ordering of URL validation and normalization. The renderer validates link destinations using a prefix-based check IsDangerousURL before resolving HTML entities...

6.1CVSS6AI score0.00287EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/15 5:0 a.m.5 views

CVE-2026-5160

Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting XSS due to improper ordering of URL validation and normalization. The renderer validates link destinations using a prefix-based check IsDangerousURL before resolving HTML entities...

6.1CVSS6.1AI score0.00287EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/15 5:0 a.m.7 views

CVE-2026-5160

Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting XSS due to improper ordering of URL validation and normalization. The renderer validates link destinations using a prefix-based check IsDangerousURL before resolving HTML entities...

5.1CVSS6.2AI score
SaveExploits0References4
Rows per page
Query Builder