Affected: Alpaquita:25: osv-scanner, Alpaquita:stream: osv-scanner

Affected: CleanStart: crossplane-provider-keycloak, CleanStart: pulumi

CVE-2026-5160 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting (XSS) due to improper ordering of URL validation and normalization. The renderer validates link destinations using a prefix-based check (IsDangerousURL) before resolving HTML entities. This allows an attacker to bypass protocol filtering by encoding dangerous schemes using HTML5 named character references. For example, a payload such as javascript:alert(1) is not recognized as dangerous during validation, leading to arbitrary script execution in the context of applications that render the URL.

Affected: Go: github.com/yuin/goldmark/renderer/html

Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting (XSS) due to improper ordering of URL validation and normalization. The renderer validates link destinations using a prefix-based check (IsDangerousURL) before resolving HTML entities. This allows an attacker to bypass protocol filtering by encoding dangerous schemes using HTML5 named character references. For example, a payload such as javascript:alert(1) is not recognized as dangerous during validation, leading to arbitrary script execution in the context of applications that render the URL.

mcphost-0.34.0-9.1 on GA media

Security update for mcphost

Affected: Ubuntu:20.04:LTS: golang-github-yuin-goldmark, Ubuntu:22.04:LTS: golang-github-yuin-goldmark, Ubuntu:24.04:LTS: golang-github-yuin-goldmark, Ubuntu:25.10: golang-github-yuin-goldmark, Ubuntu:26.04:LTS: golang-github-yuin-goldmark

Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting (XSS) due to improper ordering of URL validation and normalization. The renderer validates link destinations using a prefix-based check (IsDangerousURL) before resolving HTML entities. This allows an attacker to bypass protocol filtering by encoding dangerous schemes using HTML5 named character references. For example, a payload such as javascript:alert(1) is not recognized as dangerous during validation, leading to arbitrary script execution in the context of applications that render the URL.