18717 matches found
AZL-88338 CVE-2026-25681 affecting package telegraf for versions less than 1.31.0-23
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-88200 CVE-2026-25680 affecting package packer for versions less than 1.9.5-15
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87600 CVE-2026-25681 affecting package dasel for versions less than 2.8.1-4
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-88110 CVE-2026-25681 affecting package multus for versions less than 4.0.2-9
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87314 CVE-2026-25681 affecting package podman 5.6.1-10
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87338 CVE-2026-25680 affecting package yq 4.45.1-1
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87861 CVE-2026-25681 affecting package keda for versions less than 2.14.1-14
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87903 CVE-2026-25680 affecting package kubernetes for versions less than 1.30.10-25
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87747 CVE-2026-25681 affecting package gh for versions less than 2.62.0-17
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87555 CVE-2026-25681 affecting package containerized-data-importer for versions less than 1.62.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87378 CVE-2026-25681 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-5
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87966 CVE-2026-25681 affecting package kubevirt for versions less than 1.7.1-7
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-88230 CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-88194 CVE-2026-25681 affecting package packer for versions less than 1.9.5-15
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87561 CVE-2026-25680 affecting package containerized-data-importer for versions less than 1.62.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87813 CVE-2026-25680 affecting package influxdb for versions less than 2.7.5-17
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87918 CVE-2026-25681 affecting package kubernetes for versions less than 1.30.10-25
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87882 CVE-2026-25681 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87570 CVE-2026-25680 affecting package cri-tools for versions less than 1.32.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87242 CVE-2026-25680 affecting package cri-o 1.30.1-1
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87756 CVE-2026-25680 affecting package gh for versions less than 2.62.0-17
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87537 CVE-2026-25680 affecting package containerd2 for versions less than 2.2.4-4
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87459 CVE-2026-25680 affecting package cf-cli for versions less than 8.7.11-7
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87287 CVE-2026-25680 affecting package podman 5.6.1-10
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87654 CVE-2026-25680 affecting package docker-buildx for versions less than 0.14.0-15
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-88098 CVE-2026-25680 affecting package multus for versions less than 4.0.2-9
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87888 CVE-2026-25680 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87435 CVE-2026-25681 affecting package cert-manager for versions less than 1.12.15-9
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87344 CVE-2026-25681 affecting package yq 4.45.1-1
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87540 CVE-2026-25681 affecting package containerd2 for versions less than 2.2.4-4
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-88296 CVE-2026-25681 affecting package sriov-network-device-plugin for versions less than 3.7.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-88344 CVE-2026-25680 affecting package telegraf for versions less than 1.31.0-23
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87585 CVE-2026-25681 affecting package cri-tools for versions less than 1.32.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87221 CVE-2026-25681 affecting package cri-o 1.30.1-1
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-88293 CVE-2026-25680 affecting package sriov-network-device-plugin for versions less than 3.7.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87516 CVE-2026-25681 affecting package cni-plugins for versions less than 1.4.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87690 CVE-2026-25681 affecting package docker-compose for versions less than 2.27.0-12
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87492 CVE-2026-25681 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87591 CVE-2026-25680 affecting package dasel for versions less than 2.8.1-4
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87158 CVE-2026-25681 affecting package azl-otel-collector 0.127.0-1
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87498 CVE-2026-25680 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-88116 CVE-2026-9256 affecting package nginx for versions less than 1.28.3-4
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...
AZL-87630 CVE-2026-46597 affecting package docker-buildx for versions less than 0.14.0-13
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-87696 CVE-2026-46597 affecting package docker-compose for versions less than 2.27.0-11
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-87218 CVE-2026-46598 affecting package cri-o 1.30.1-1
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...
AZL-88083 CVE-2026-46597 affecting package moby-engine for versions less than 25.0.3-18
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-88311 CVE-2026-46597 affecting package telegraf for versions less than 1.31.0-22
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-88203 CVE-2026-46598 affecting package packer for versions less than 1.9.5-15
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...
AZL-88347 CVE-2026-46598 affecting package telegraf for versions less than 1.31.0-23
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...