Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podmanUpgrade opentelemetry-collectorUpgrade podman-testsUpgrade podman-remoteUpgrade podman-pluginsUpgrade podman-docker | Jul 7, 2026 | Jul 1, 2026 |
| Amazon Linux Ami 2 | — | Upgrade ecs-initUpgrade docker-debuginfoUpgrade containerd-stressUpgrade runfinch-finchUpgrade nerdctlUpgrade nerdctl-debuginfoUpgrade soci-snapshotterUpgrade containerd-debuginfoUpgrade dockerUpgrade containerd | Jun 16, 2026 | Jun 16, 2026 |
| Amazon_linux_2023 | — | Upgrade runfinch-finchUpgrade docker-debuginfoUpgrade docker-debugsourceUpgrade credentials-fetcherUpgrade ecs-initUpgrade containerd-debuginfoUpgrade nerdctlUpgrade dockerUpgrade containerdUpgrade containerd-debugsourceUpgrade soci-snapshotterUpgrade containerd-stress-debuginfoUpgrade containerd-stress | Jun 15, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade grafanaUpgrade image-builderUpgrade flightctl-observabilityUpgrade podman-tests-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade flightctl-agentUpgrade grafana-debugsourceUpgrade osbuild-composer-tests-debuginfoUpgrade podman-debugsourceUpgrade flightctl-selinuxUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade osbuild-composerUpgrade opentelemetry-collectorUpgrade osbuild-composer-workerUpgrade osbuild-composer-debugsourceUpgrade flightctl-servicesUpgrade image-builder-debuginfoUpgrade grafana-debuginfoUpgrade podman-dockerUpgrade grafana-selinuxUpgrade podmanUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-composer-core-debuginfoUpgrade podman-pluginsUpgrade image-builder-debugsourceNo solution existsUpgrade osbuild-composer-debuginfoUpgrade podman-testsUpgrade flightctl-cliUpgrade podman-remote-debuginfoUpgrade osbuild-composer-core | Jul 3, 2026 | May 22, 2026 |
| Rocky_linux | — | Upgrade grafana-debugsourceUpgrade podman-tests-debuginfoUpgrade osbuild-composer-debugsourceUpgrade osbuild-composer-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade grafanaUpgrade podman-plugins-debuginfoUpgrade podman-testsUpgrade grafana-debuginfoUpgrade osbuild-composer-workerUpgrade osbuild-composer-coreUpgrade podmanUpgrade podman-debuginfoUpgrade grafana-selinuxUpgrade image-builder-debugsourceUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade opentelemetry-collectorUpgrade image-builderUpgrade osbuild-composer-core-debuginfoUpgrade image-builder-debuginfoUpgrade podman-pluginsUpgrade osbuild-composerUpgrade podman-debugsource | Jul 7, 2026 | Jul 5, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub