Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade rcloneUpgrade go | Mar 9, 2026 | Mar 6, 2026 |
| Amazon Linux Ami 2 | — | Upgrade nerdctl-debuginfoUpgrade containerd-stressUpgrade dockerUpgrade golang-srcUpgrade cni-pluginsUpgrade containerdUpgrade golangUpgrade golang-binUpgrade ecs-initUpgrade golang-docsUpgrade nerdctlUpgrade golang-testsUpgrade runcUpgrade runc-debuginfoUpgrade soci-snapshotterUpgrade rcloneUpgrade cni-plugins-debuginfoUpgrade cri-toolsUpgrade runfinch-finchUpgrade oci-add-hooks-debuginfoUpgrade containerd-debuginfoUpgrade docker-debuginfoUpgrade golist-debuginfoUpgrade amazon-ecr-credential-helperUpgrade oci-add-hooksUpgrade cri-tools-debuginfoUpgrade rclone-debuginfoUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golang-miscUpgrade amazon-cloudwatch-agentUpgrade golistUpgrade golang-shared | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libcap-develUpgrade oci-add-hooks-debugsourceUpgrade captreeUpgrade libcap-staticUpgrade containerdUpgrade rclone-debuginfoUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade rcloneUpgrade golang-binUpgrade golist-debugsourceUpgrade oci-add-hooksUpgrade golistUpgrade rclone-debugsourceUpgrade dockerUpgrade golang-github-burntsushi-toml-testUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-testsUpgrade golang-github-burntsushi-toml-debugsourceUpgrade git-lfs-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-github-burntsushi-toml-develUpgrade containerd-debugsourceUpgrade soci-snapshotterUpgrade containerd-debuginfoUpgrade golang-github-cpuguy83-md2manUpgrade golang-miscUpgrade nerdctlUpgrade containerd-stress-debuginfoUpgrade cni-pluginsUpgrade libcap-debuginfoUpgrade cni-plugins-debugsourceUpgrade oci-add-hooks-debuginfoUpgrade golist-debuginfoUpgrade runc-debuginfoUpgrade docker-debuginfoUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade captree-debuginfoUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade git-lfs-debuginfoUpgrade golang-srcUpgrade golang-github-burntsushi-tomlUpgrade golang-docsUpgrade docker-debugsourceUpgrade runc-debugsourceUpgrade libcapUpgrade cni-plugins-debuginfoUpgrade amazon-cloudwatch-agentUpgrade golang-github-burntsushi-toml-debuginfoUpgrade ecs-initUpgrade git-lfsUpgrade yq-debugsourceUpgrade yq-debuginfoUpgrade yqUpgrade libcap-debugsourceUpgrade containerd-stressUpgrade amazon-ecr-credential-helperUpgrade runcUpgrade runfinch-finchUpgrade golang-sharedUpgrade golang-github-burntsushi-toml-test-develUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade golangUpgrade credentials-fetcher | Mar 27, 2026 | Mar 6, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 6, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.7Upgrade Splunk Enterprise to version 10.2.4Upgrade Splunk Enterprise to version 9.3.13Upgrade Splunk Enterprise to version 9.4.12Upgrade Splunk Enterprise to version 10.4.0 | Jul 30, 2026 | Mar 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Mar 6, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub