The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade rcloneUpgrade go | Mar 9, 2026 | Mar 6, 2026 |
| Amazon Linux Ami 2 | — | Upgrade ecs-initUpgrade golang-docsUpgrade containerdUpgrade runcUpgrade golang-srcUpgrade golang-testsUpgrade cni-pluginsUpgrade nerdctl-debuginfoUpgrade runc-debuginfoUpgrade golang-binUpgrade dockerUpgrade golangUpgrade containerd-stressUpgrade nerdctlUpgrade soci-snapshotterUpgrade rcloneUpgrade containerd-debuginfoUpgrade rclone-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade golang-sharedUpgrade amazon-ecr-credential-helperUpgrade golist-debuginfoUpgrade cri-toolsUpgrade golistUpgrade amazon-ecr-credential-helper-debuginfoUpgrade cni-plugins-debuginfoUpgrade docker-debuginfoUpgrade golang-miscUpgrade oci-add-hooksUpgrade cri-tools-debuginfoUpgrade runfinch-finchUpgrade amazon-cloudwatch-agent | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-github-burntsushi-toml-test-debuginfoUpgrade golist-debuginfoUpgrade golang-github-burntsushi-toml-debuginfoUpgrade cni-plugins-debuginfoUpgrade yqUpgrade cni-plugins-debugsourceUpgrade golangUpgrade containerd-stress-debuginfoUpgrade cni-pluginsUpgrade libcap-debuginfoUpgrade golang-sharedUpgrade golang-github-burntsushi-toml-test-develUpgrade credentials-fetcherUpgrade yq-debuginfoUpgrade runfinch-finchUpgrade runcUpgrade nerdctlUpgrade golang-srcUpgrade libcapUpgrade docker-debugsourceUpgrade amazon-ecr-credential-helperUpgrade golang-github-burntsushi-tomlUpgrade golang-docsUpgrade ecs-initUpgrade libcap-debugsourceUpgrade containerd-stressUpgrade amazon-cloudwatch-agentUpgrade runc-debugsourceUpgrade git-lfsUpgrade yq-debugsourceUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade git-lfs-debuginfoUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade captree-debuginfoUpgrade docker-debuginfoUpgrade runc-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade libcap-develUpgrade git-lfs-debugsourceUpgrade golang-github-burntsushi-toml-debugsourceUpgrade golang-binUpgrade rclone-debuginfoUpgrade containerdUpgrade golang-testsUpgrade libcap-staticUpgrade containerd-debugsourceUpgrade oci-add-hooks-debugsourceUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade dockerUpgrade golang-github-burntsushi-toml-testUpgrade golang-github-cpuguy83-md2man-develUpgrade captreeUpgrade golang-miscUpgrade golist-debugsourceUpgrade golang-github-burntsushi-toml-develUpgrade oci-add-hooksUpgrade containerd-debuginfoUpgrade soci-snapshotterUpgrade rcloneUpgrade rclone-debugsourceUpgrade golistUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-github-cpuguy83-md2man | Mar 27, 2026 | Mar 6, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 6, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.12Upgrade Splunk Enterprise to version 9.3.13Upgrade Splunk Enterprise to version 10.4.0Upgrade Splunk Enterprise to version 10.2.4Upgrade Splunk Enterprise to version 10.0.7 | Jul 30, 2026 | Mar 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Mar 6, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub