> CVE-2026-39823

« BACK_TO_HOME
PUBLISHED
2026-05-07 20:16
MODIFIED
2026-05-07 20:38
EPSS (Prob. Exploit)
0.31%
Top 75.5%
DATA SOURCES:
NVD 🔗 2026-05-07 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-02 MSRC 🔗 2026-11-02

> DESCRIPTION

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: Red Hat OpenShift API for Data Protection
A new version of OpenShift API for Data Protection (OADP) is now available.
Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.10.1 release
Red Hat build of OpenTelemetry 3.10.1 has been released
Red Hat Security Advisory: multicluster engine for Kubernetes v2.11.5 security update
Red Hat multicluster engine for Kubernetes v2.11 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this up...
Red Hat Security Advisory: golang security update
An update for golang is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Co...
Red Hat Security Advisory: Red Hat AI Base Images 3.5.5 (Neuron)
Red Hat AI Base Images 3.5.5 (Neuron) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.4.6 (Neuron)
Red Hat AI Base Images 3.4.6 (Neuron) is now available.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Bypass of meta content URL escaping causes XSS in html/template

AFFECTED PACKAGES:
Unknown / Unknown
152 versions affected
ALIASES:
BIT-golang-2026-39823, GO-2026-4982

> HISTORIQUE DES MODIFICATIONS

Première apparition
07/05/2026 20:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 6 months ago

> REFERENCES

https://go.dev/cl/769920
https://go.dev/issue/78913
https://groups.google.com/g/golang-announce/c/qcCIEXso47M
https://pkg.go.dev/vuln/GO-2026-4982
« BACK_TO_HOME