CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-srcUpgrade go-toolsetUpgrade golang-miscUpgrade golangUpgrade golang-docsUpgrade golang-raceUpgrade golang-binUpgrade golang-testsUpgrade delve | Oct 11, 2026 | Jun 1, 2026 |
| Alpine Linux | — | Upgrade goUpgrade rclone | May 20, 2026 | May 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade docker-debuginfoUpgrade cri-toolsUpgrade cri-tools-debuginfoUpgrade runcUpgrade containerd-stressUpgrade rclone-debuginfoUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runfinch-finchUpgrade golang-docsUpgrade rcloneUpgrade oci-add-hooksUpgrade soci-snapshotterUpgrade oci-add-hooks-debuginfoUpgrade golang-testsUpgrade dockerUpgrade containerd-debuginfoUpgrade golistUpgrade containerdUpgrade golang-miscUpgrade cni-plugins-debuginfoUpgrade golang-binUpgrade golist-debuginfoUpgrade runc-debuginfoUpgrade golangUpgrade ecs-initUpgrade nerdctl-debuginfoUpgrade nerdctlUpgrade cni-pluginsUpgrade golang-sharedUpgrade amazon-cloudwatch-agentUpgrade amazon-ecr-credential-helperUpgrade golang-src | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-sharedUpgrade containerd-stressUpgrade yq-debuginfoUpgrade rclone-debugsourceUpgrade docker-debuginfoUpgrade rclone-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade amazon-ecr-credential-helperUpgrade containerdUpgrade containerd-debuginfoUpgrade golang-docsUpgrade containerd-debugsourceUpgrade dockerUpgrade runc-debuginfoUpgrade soci-snapshotterUpgrade golangUpgrade oci-add-hooks-debugsourceUpgrade ecs-initUpgrade yq-debugsourceUpgrade rcloneUpgrade docker-debugsourceUpgrade containerd-stress-debuginfoUpgrade yqUpgrade golistUpgrade oci-add-hooksUpgrade nerdctlUpgrade runcUpgrade golist-debugsourceUpgrade golang-srcUpgrade golang-miscUpgrade golang-binUpgrade credentials-fetcherUpgrade runc-debugsourceUpgrade golist-debuginfoUpgrade runfinch-finch | May 28, 2026 | May 7, 2026 |
| Freebsd | — | Upgrade gohugo | Jun 15, 2026 | May 29, 2026 |
| Oracle_linux | — | Upgrade golang-docsUpgrade delveUpgrade golang-raceUpgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade golang-testsUpgrade go-toolsetUpgrade golang-bin | Jun 5, 2026 | May 7, 2026 |
| Redhat_linux | — | Upgrade golang-raceNo solution existsUpgrade delve-debugsourceUpgrade golang-docsUpgrade delveUpgrade golang-testsUpgrade golang-srcUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golang-binUpgrade golangUpgrade golang-misc | Jul 17, 2026 | May 7, 2026 |
| Rocky_linux | — | Upgrade golang-raceUpgrade delve-debugsourceUpgrade delveUpgrade golangUpgrade go-toolsetUpgrade golang-binUpgrade delve-debuginfo | Aug 27, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | May 7, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub