VDB
GO-2026-4980
GO-2026-4980
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Escaper bypass leads to XSS in html/template
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | crane | * |
| chainguard | thanos-operator-fips | * |
| chainguard | gitaly-fips-18.11 | * |
| chainguard | rabbitmq-default-user-credential-updater-fips | * |
| chainguard | azure-aad-pod-identity-mic | 0 |
| chainguard | longhorn-manager-fips-1.9 | 0 |
| chainguard | crossplane-provider-aws-wafv2-fips | 0 |
| chainguard | licenseclassifier | * |
| chainguard | opensearch-datasource | 0 |
| wolfi | octo-sts | 0 |
| chainguard | crossplane-provider-aws-kafka | 0 |
| chainguard | kubernetes-fips-1.35 | * |
| chainguard | thanos-receive-controller-fips | 0 |
| chainguard | node-feature-discovery-fips-0.18 | * |
| wolfi | buildah | 0 |
| chainguard | ld-relay-fips | 0 |
| chainguard | gitlab-workhorse-ce-fips-18.3 | 0 |
| chainguard | ingress-nginx-controller-fips-1.13 | * |
| chainguard | kueue-fips-0.16 | 0 |
| chainguard | ytt-fips | * |
…and 1906 more
Timeline
- May 7, 2026 CVE Published
- Aug 31, 2026 CVE Updated