https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:53:31 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-04129 bdu:2026-04129 https://cve.radiocsirt.org/vuln/bdu:2026-04129 https://cve.radiocsirt.org/vuln/bell-cve-2026-27142 <p><strong>Affected:</strong> Alpaquita:23: go, Alpaquita:25: go, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:25: go, BellSoft Hardened Containers:stream: go</p> <p><strong>Affected:</strong> Alpaquita:23: go, Alpaquita:25: go, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:25: go, BellSoft Hardened Containers:stream: go</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-27142 https://cve.radiocsirt.org/vuln/bit-golang-2026-27142 <p><strong>Affected:</strong> Bitnami: golang</p> <p>Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value &#34;refresh&#34;. A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow &#34;url=&#34; by setting htmlmetacontenturlescape=0.</p> <p><strong>Affected:</strong> Bitnami: golang</p> <p>Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value &#34;refresh&#34;. A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow &#34;url=&#34; by setting htmlmetacontenturlescape=0.</p> https://cve.radiocsirt.org/vuln/bit-golang-2026-27142 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0315 certfr-2026-avi-0315 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0315 https://cve.radiocsirt.org/vuln/cleanstart-2026-aa33691 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: calico-fips</p> <p>Package calico-fips version 3.28.5-r4 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2025-13281</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: calico-fips</p> <p>Package calico-fips version 3.28.5-r4 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2025-13281</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-aa33691 https://cve.radiocsirt.org/vuln/euvd-2026-276161 EUVD-2026-276161 https://cve.radiocsirt.org/vuln/euvd-2026-276161 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27142 <p>Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value &#34;refresh&#34;. A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow &#34;url=&#34; by setting htmlmetacontenturlescape=0.</p> <p>Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value &#34;refresh&#34;. A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow &#34;url=&#34; by setting htmlmetacontenturlescape=0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-27142 https://cve.radiocsirt.org/vuln/ghsa-j4j7-vw47-rhfq <p>Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value &#34;refresh&#34;. A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow &#34;url=&#34; by setting htmlmetacontenturlescape=0.</p> <p>Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value &#34;refresh&#34;. A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow &#34;url=&#34; by setting htmlmetacontenturlescape=0.</p> https://cve.radiocsirt.org/vuln/ghsa-j4j7-vw47-rhfq https://cve.radiocsirt.org/vuln/msrc_cve-2026-27142 msrc_CVE-2026-27142 https://cve.radiocsirt.org/vuln/msrc_cve-2026-27142 https://cve.radiocsirt.org/vuln/oesa-2026-1850 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: golang</p> <p>. Security Fix(es):</p> <p>Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value &amp;quot;refresh&amp;quot;. A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow &amp;quot;url=&amp;quot; by setting htmlmetacontenturlescape=0.(CVE-2026-27142)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: golang</p> <p>. Security Fix(es):</p> <p>Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value &amp;quot;refresh&amp;quot;. A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow &amp;quot;url=&amp;quot; by setting htmlmetacontenturlescape=0.(CVE-2026-27142)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1850 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10299-1 <p>go1.26-1.26.1-1.1 on GA media</p> <p>go1.26-1.26.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10299-1 https://cve.radiocsirt.org/vuln/rhsa-2026:5192 <p>html/template: URLs in meta content attribute actions are not escaped in html/template</p> <p>html/template: URLs in meta content attribute actions are not escaped in html/template</p> https://cve.radiocsirt.org/vuln/rhsa-2026:5192 https://cve.radiocsirt.org/vuln/suse-su-2026:21195-1 <p>Security update for go1.26-openssl</p> <p>Security update for go1.26-openssl</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21195-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-27142 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-1.24, Ubuntu:24.04:LTS: golang-1.24, Ubuntu:25.10: golang-1.24, Ubuntu:25.10: golang-1.25, Ubuntu:26.04:LTS: golang-1.24, Ubuntu:26.04:LTS: golang-1.25, Ubuntu:26.04:LTS: golang-1.26</p> <p>Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value &#34;refresh&#34;. A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow &#34;url=&#34; by setting htmlmetacontenturlescape=0.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-1.24, Ubuntu:24.04:LTS: golang-1.24, Ubuntu:25.10: golang-1.24, Ubuntu:25.10: golang-1.25, Ubuntu:26.04:LTS: golang-1.24, Ubuntu:26.04:LTS: golang-1.25, Ubuntu:26.04:LTS: golang-1.26</p> <p>Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value &#34;refresh&#34;. A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow &#34;url=&#34; by setting htmlmetacontenturlescape=0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-27142 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0548 <p>Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0548