18717 matches found
AZL-87561 CVE-2026-25680 affecting package containerized-data-importer for versions less than 1.62.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87459 CVE-2026-25680 affecting package cf-cli for versions less than 8.7.11-7
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87537 CVE-2026-25680 affecting package containerd2 for versions less than 2.2.4-4
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87516 CVE-2026-25681 affecting package cni-plugins for versions less than 1.4.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87756 CVE-2026-25680 affecting package gh for versions less than 2.62.0-17
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87918 CVE-2026-25681 affecting package kubernetes for versions less than 1.30.10-25
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87378 CVE-2026-25681 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-5
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87555 CVE-2026-25681 affecting package containerized-data-importer for versions less than 1.62.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87338 CVE-2026-25680 affecting package yq 4.45.1-1
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87654 CVE-2026-25680 affecting package docker-buildx for versions less than 0.14.0-15
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-88200 CVE-2026-25680 affecting package packer for versions less than 1.9.5-15
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87888 CVE-2026-25680 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87344 CVE-2026-25681 affecting package yq 4.45.1-1
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87540 CVE-2026-25681 affecting package containerd2 for versions less than 2.2.4-4
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-88296 CVE-2026-25681 affecting package sriov-network-device-plugin for versions less than 3.7.0-6
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-88194 CVE-2026-25681 affecting package packer for versions less than 1.9.5-15
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87570 CVE-2026-25680 affecting package cri-tools for versions less than 1.32.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-88230 CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87287 CVE-2026-25680 affecting package podman 5.6.1-10
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87221 CVE-2026-25681 affecting package cri-o 1.30.1-1
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87591 CVE-2026-25680 affecting package dasel for versions less than 2.8.1-4
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87690 CVE-2026-25681 affecting package docker-compose for versions less than 2.27.0-12
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87813 CVE-2026-25680 affecting package influxdb for versions less than 2.7.5-17
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87480 CVE-2026-25681 affecting package cf-cli for versions less than 8.7.11-7
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87435 CVE-2026-25681 affecting package cert-manager for versions less than 1.12.15-9
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87600 CVE-2026-25681 affecting package dasel for versions less than 2.8.1-4
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87705 CVE-2026-25680 affecting package docker-compose for versions less than 2.27.0-12
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87861 CVE-2026-25681 affecting package keda for versions less than 2.14.1-14
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87143 CVE-2026-25680 affecting package azl-otel-collector 0.127.0-1
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87492 CVE-2026-25681 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-88344 CVE-2026-25680 affecting package telegraf for versions less than 1.31.0-23
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87825 CVE-2026-25681 affecting package influxdb for versions less than 2.7.5-17
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-88293 CVE-2026-25680 affecting package sriov-network-device-plugin for versions less than 3.7.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87903 CVE-2026-25680 affecting package kubernetes for versions less than 1.30.10-25
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87747 CVE-2026-25681 affecting package gh for versions less than 2.62.0-17
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87963 CVE-2026-25680 affecting package kubevirt for versions less than 1.7.1-7
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87242 CVE-2026-25680 affecting package cri-o 1.30.1-1
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-88110 CVE-2026-25681 affecting package multus for versions less than 4.0.2-9
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-88098 CVE-2026-25680 affecting package multus for versions less than 4.0.2-9
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87314 CVE-2026-25681 affecting package podman 5.6.1-10
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-87612 CVE-2026-25681 affecting package docker-buildx for versions less than 0.14.0-15
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...
AZL-88116 CVE-2026-9256 affecting package nginx for versions less than 1.28.3-4
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression PCRE captures for example, ^/.$ and a replacement string that references...
AZL-87981 CVE-2026-46597 affecting package kubevirt for versions less than 1.7.1-7
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-87900 CVE-2026-46597 affecting package kubernetes for versions less than 1.30.10-25
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-88182 CVE-2026-46597 affecting package packer for versions less than 1.9.5-15
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-87254 CVE-2026-46597 affecting package cri-o 1.30.1-1
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-87194 CVE-2026-46597 affecting package buildah 1.43.1-3
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-87642 CVE-2026-46598 affecting package docker-buildx for versions less than 0.14.0-15
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...
AZL-88311 CVE-2026-46597 affecting package telegraf for versions less than 1.31.0-22
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...