Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade containerd-debuginfoUpgrade ecs-initUpgrade containerdUpgrade docker-debuginfoUpgrade runfinch-finchUpgrade nerdctlUpgrade dockerUpgrade soci-snapshotterUpgrade nerdctl-debuginfoUpgrade containerd-stress | Jun 16, 2026 | Jun 16, 2026 |
| Amazon_linux_2023 | — | Upgrade docker-debuginfoUpgrade containerd-debuginfoUpgrade docker-debugsourceUpgrade ecs-initUpgrade containerd-stress-debuginfoUpgrade runfinch-finchUpgrade credentials-fetcherUpgrade containerd-stressUpgrade containerdUpgrade nerdctlUpgrade dockerUpgrade containerd-debugsourceUpgrade soci-snapshotter | Jun 15, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade grafana-debuginfoUpgrade osbuild-composer-debuginfoNo solution existsUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-debugsourceUpgrade image-builder-debugsourceUpgrade osbuild-composer-workerUpgrade grafana-selinuxUpgrade osbuild-composer-tests-debuginfoUpgrade osbuild-composer-coreUpgrade osbuild-composerUpgrade grafana-debugsourceUpgrade image-builder-debuginfoUpgrade grafanaUpgrade osbuild-composer-core-debuginfoUpgrade image-builderUpgrade osbuild-composer-dnf-json | Jul 17, 2026 | May 22, 2026 |
| Rocky_linux | — | Upgrade osbuild-composer-debuginfoUpgrade osbuild-composerUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-composer-coreUpgrade image-builder-debugsourceUpgrade osbuild-composer-debugsourceUpgrade image-builderUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-workerUpgrade image-builder-debuginfo | Sep 15, 2026 | Sep 11, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub