VDB
GO-2026-5027
GO-2026-5027
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | kwok | * |
| chainguard | apko-fips | * |
| wolfi | gobuster | * |
| chainguard | yunikorn-k8shim-fips | * |
| chainguard | tekton-chains-fips | * |
| chainguard | rke2-runtime-fips-1.34 | * |
| chainguard | gcp-compute-persistent-disk-csi-driver-1.23 | * |
| chainguard | frankenphp-8.2 | 0 |
| chainguard | gptscript | 0 |
| wolfi | osv-scanner | * |
| wolfi | net-kourier-1.21 | * |
| chainguard | kubernetes-csi-external-attacher-fips | * |
| chainguard | nerdctl-fips | * |
| wolfi | sops | * |
| chainguard | kyverno-1.18 | 0 |
| chainguard | aws-otel-collector-fips | * |
| chainguard | kcp-0.30 | * |
| chainguard | grafana-mimir-fips-2.17 | * |
| wolfi | slsa-verifier | * |
| chainguard | external-secrets-operator-fips-2.3 | * |
…and 1269 more
Timeline
- May 22, 2026 CVE Published
- Sep 1, 2026 CVE Updated