Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade ecs-initUpgrade runfinch-finchUpgrade docker-debuginfoUpgrade containerd-debuginfoUpgrade nerdctlUpgrade dockerUpgrade containerd-stressUpgrade nerdctl-debuginfoUpgrade soci-snapshotter | Jun 16, 2026 | Jun 16, 2026 |
| Amazon_linux_2023 | — | Upgrade soci-snapshotterUpgrade containerd-debugsourceUpgrade dockerUpgrade nerdctlUpgrade ecs-initUpgrade containerd-stressUpgrade credentials-fetcherUpgrade containerd-stress-debuginfoUpgrade runfinch-finchUpgrade containerd-debuginfoUpgrade containerdUpgrade docker-debugsourceUpgrade docker-debuginfo | Jun 15, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade osbuild-composer-core-debuginfoUpgrade osbuild-composer-workerUpgrade image-builder-debuginfoUpgrade image-builder-debugsourceUpgrade osbuild-composer-coreUpgrade grafana-debugsourceUpgrade image-builderUpgrade grafana-selinuxUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-composerUpgrade osbuild-composer-tests-debuginfoUpgrade grafanaUpgrade osbuild-composer-debugsourceNo solution existsUpgrade grafana-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-debuginfo | Jul 17, 2026 | May 22, 2026 |
| Rocky_linux | — | Upgrade osbuild-composer-core-debuginfoUpgrade osbuild-composer-coreUpgrade image-builder-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-workerUpgrade osbuild-composer-debugsourceUpgrade image-builderUpgrade image-builder-debugsourceUpgrade osbuild-composerUpgrade osbuild-composer-debuginfo | Sep 15, 2026 | Sep 11, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub