Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-selinuxUpgrade osbuild-composer-coreUpgrade opentelemetry-collectorUpgrade podmanUpgrade osbuild-composerUpgrade podman-testsUpgrade podman-remoteUpgrade grafanaUpgrade podman-pluginsUpgrade osbuild-composer-workerUpgrade podman-docker | Jul 7, 2026 | Jul 1, 2026 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade nerdctl-debuginfoUpgrade soci-snapshotterUpgrade containerdUpgrade containerd-debuginfoUpgrade docker-debuginfoUpgrade runfinch-finchUpgrade containerd-stressUpgrade ecs-initUpgrade nerdctl | Jun 16, 2026 | Jun 16, 2026 |
| Amazon_linux_2023 | — | Upgrade nerdctlUpgrade soci-snapshotterUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade containerd-debugsourceUpgrade dockerUpgrade containerdUpgrade containerd-stress-debuginfoUpgrade docker-debugsourceUpgrade ecs-initUpgrade runfinch-finchUpgrade credentials-fetcherUpgrade docker-debuginfo | Jun 15, 2026 | May 22, 2026 |
| Oracle_linux | — | Upgrade osbuild-composer-workerUpgrade podman-testsUpgrade podman-dockerUpgrade osbuild-composer-coreUpgrade podmanUpgrade podman-remoteUpgrade osbuild-composerUpgrade podman-pluginsUpgrade image-builder | Oct 22, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade image-builder-debuginfoUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade image-builder-debugsourceUpgrade osbuild-composer-coreUpgrade podmanUpgrade podman-dockerUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-composer-debuginfoUpgrade grafana-debuginfoNo solution existsUpgrade osbuild-composer-dnf-jsonUpgrade grafana-selinuxUpgrade podman-testsUpgrade flightctl-cliUpgrade osbuild-composer-debugsourceUpgrade podman-remoteUpgrade grafana-debugsourceUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade flightctl-observabilityUpgrade osbuild-composerUpgrade osbuild-composer-workerUpgrade image-builderUpgrade osbuild-composer-tests-debuginfoUpgrade flightctl-selinuxUpgrade flightctl-servicesUpgrade opentelemetry-collectorUpgrade grafanaUpgrade osbuild-composer-worker-debuginfoUpgrade podman-tests-debuginfoUpgrade flightctl-agentUpgrade podman-debuginfo | Jul 3, 2026 | May 22, 2026 |
| Rocky_linux | — | Upgrade podman-plugins-debuginfoUpgrade osbuild-composer-debugsourceUpgrade podman-tests-debuginfoUpgrade grafana-debugsourceUpgrade podman-testsUpgrade osbuild-composer-workerUpgrade grafana-debuginfoUpgrade grafanaUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-debuginfoUpgrade podman-remoteUpgrade image-builder-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade opentelemetry-collectorUpgrade podman-pluginsUpgrade osbuild-composerUpgrade podman-debuginfoUpgrade grafana-selinuxUpgrade podman-remote-debuginfoUpgrade podmanUpgrade image-builder-debugsourceUpgrade podman-debugsourceUpgrade image-builderUpgrade osbuild-composer-core | Jul 7, 2026 | Jul 5, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub