CVE-2026-97045 Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

CVE-2026-97045

The golang.org/x/net package contains a vulnerability in the childTextNodesAreLiteral function. The root cause is that the function previously stopped walking up the tree at the nearest foreign ancestor once an HTML integration point was found. This is insufficient because that integration point ...

GO-2026-6866 Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

CVE-2026-78408

The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...

PT-2026-84764

Name of the Vulnerable Software and Affected Versions util-linux affected versions not specified Description The nsenter tool contains an issue where the --join-cgroup option opens the target cgroup.procs file as root and maintains that file descriptor during subsequent namespace and credential...