CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-miscUpgrade golang-srcUpgrade go-toolsetUpgrade golangUpgrade golang-raceUpgrade golang-testsUpgrade golang-binUpgrade golang-docsUpgrade delve | Oct 11, 2026 | Jun 1, 2026 |
| Alpine Linux | — | Upgrade rcloneUpgrade go | May 20, 2026 | May 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade soci-snapshotterUpgrade nerdctl-debuginfoUpgrade cni-pluginsUpgrade oci-add-hooks-debuginfoUpgrade oci-add-hooksUpgrade golang-sharedUpgrade containerd-debuginfoUpgrade dockerUpgrade cni-plugins-debuginfoUpgrade golang-testsUpgrade amazon-ecr-credential-helperUpgrade containerdUpgrade amazon-cloudwatch-agentUpgrade rcloneUpgrade golang-miscUpgrade nerdctlUpgrade golist-debuginfoUpgrade golang-binUpgrade golistUpgrade golangUpgrade runc-debuginfoUpgrade ecs-initUpgrade rclone-debuginfoUpgrade cri-toolsUpgrade amazon-ecr-credential-helper-debuginfoUpgrade containerd-stressUpgrade docker-debuginfoUpgrade golang-docsUpgrade cri-tools-debuginfoUpgrade runfinch-finchUpgrade runc | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade rclone-debugsourceUpgrade containerd-stressUpgrade golang-docsUpgrade golang-sharedUpgrade soci-snapshotterUpgrade runc-debuginfoUpgrade rclone-debuginfoUpgrade containerd-debugsourceUpgrade containerd-debuginfoUpgrade golang-testsUpgrade amazon-ecr-credential-helperUpgrade yq-debuginfoUpgrade dockerUpgrade docker-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade containerdUpgrade golang-srcUpgrade golist-debugsourceUpgrade runc-debugsourceUpgrade oci-add-hooks-debugsourceUpgrade runcUpgrade nerdctlUpgrade docker-debugsourceUpgrade ecs-initUpgrade containerd-stress-debuginfoUpgrade runfinch-finchUpgrade golangUpgrade oci-add-hooksUpgrade credentials-fetcherUpgrade golang-binUpgrade golistUpgrade yq-debugsourceUpgrade golist-debuginfoUpgrade golang-miscUpgrade rcloneUpgrade yq | May 28, 2026 | May 7, 2026 |
| Freebsd | — | Upgrade gohugo | Jun 15, 2026 | May 29, 2026 |
| Oracle_linux | — | Upgrade delveUpgrade golang-raceUpgrade golang-docsUpgrade go-toolsetUpgrade golang-miscUpgrade golang-testsUpgrade golang-binUpgrade golang-srcUpgrade golang | Jun 5, 2026 | May 7, 2026 |
| Redhat_linux | — | Upgrade golang-srcUpgrade delve-debuginfoUpgrade golangUpgrade golang-binUpgrade go-toolsetUpgrade golang-miscUpgrade golang-docsUpgrade golang-testsUpgrade delveUpgrade golang-raceNo solution existsUpgrade delve-debugsource | Jul 17, 2026 | May 7, 2026 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade delveUpgrade golang-raceUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golangUpgrade golang-bin | Aug 27, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | May 7, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub