VDB

RHSA-2026:59558

RHSA-2026:59558 PUBLISHED CVSS 7.699999809265137 HIGH

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.

Risk Scores

CVSS 3.1
7.699999809265137
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatregistry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:fe7121a0949f5ac8d69f48adc4c4237648e962488c2f754b6a0c6ba6b79adaff_amd64 as a component of multicluster engine for Kubernetes 2.8*
Red Hatregistry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:9716e9b89f4c00ca1c49a172c19cd3b4df780fedee35c5ca78691c8576febb6f_s390x as a component of multicluster engine for Kubernetes 2.8*
Red Hatregistry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:4ba8f8ff0b3ca51a496506e3e19a0aa308e1406e1703c198ac37eb4f558bc6b7_arm64 as a component of multicluster engine for Kubernetes 2.8*, *, *
Red Hatregistry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:245781178a4063803e9ced7fa439e9bc93f36819f542ef07d792273cf5a10991_arm64 as a component of multicluster engine for Kubernetes 2.8*, *, *
Red Hatregistry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:014daa69bf38d5d18cbbb773ac22d80d3eeb6d4358abc0e692900035f6ee503f_amd64 as a component of multicluster engine for Kubernetes 2.8*
Red Hatregistry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:62c79619d716abaab1f7f828b4834b70c2a3417e41cc5689efff969ad831871d_ppc64le as a component of multicluster engine for Kubernetes 2.8*, *, *
Red Hatregistry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b642fd4533d1dddb665aab6f731747c232cbe927b73cf8b91f4dc4b795a4c8b5_ppc64le as a component of multicluster engine for Kubernetes 2.8*, *, *
Red Hatregistry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1728de829fbb54d6965cbea34260618c09b8f87dd6a6f315e563406ac84d1a92_arm64 as a component of multicluster engine for Kubernetes 2.8*, *, *
Red Hatregistry.redhat.io/multicluster-engine/hive-rhel9@sha256:3f9d4a811c8f6ba0719fc7f381f0b788c013e9d6d6f7d0597e602d2cdc49a58b_s390x as a component of multicluster engine for Kubernetes 2.8*, *, *
Red Hatregistry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d3af9b33b067e8314df196ac66ead6c64d4fafd93e535b94b50d286a6318d04a_amd64 as a component of multicluster engine for Kubernetes 2.8*
Red Hatregistry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:cf671008f75e9d5d2d1efc97ce9877ff185747051ccedbf581240cb11d50da32_ppc64le as a component of multicluster engine for Kubernetes 2.8*
Red Hatregistry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:3f45b2cc1c807874a58bfc2e1822bb1fb097cc15a1ba33312814e4c5963e2712_s390x as a component of multicluster engine for Kubernetes 2.8*
Red Hatregistry.redhat.io/multicluster-engine/work-rhel9@sha256:6abd14c297b68d535e7ae7e0d2ca21178135e266aaba19373ef99ba10ac15f47_amd64 as a component of multicluster engine for Kubernetes 2.8*
Red Hatregistry.redhat.io/multicluster-engine/registration-rhel9@sha256:d7fe3f46b8ebc9a49c44c33b707b8648d0b853cf4f026adfc548dbfab0afad1a_ppc64le as a component of multicluster engine for Kubernetes 2.8*, *, *
Red Hatregistry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:068de91b5d0fad7f0cc3d2f795c1c3f77015d260c0bca8e284a2a9fbf8216230_s390x as a component of multicluster engine for Kubernetes 2.8*, *, *
Red Hatregistry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:5f89e675993e724c3f9dbf32765fe5eb9127929be7ee43671a477f4c548383e8_arm64 as a component of multicluster engine for Kubernetes 2.8*, *, *
Red Hatregistry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d1d588dada5b4df6834112599ded1d58803440dbb469bcef41f45edc588eeab5_s390x as a component of multicluster engine for Kubernetes 2.8*, *, *
Red Hatregistry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c3459c7dc6409b282596899121728e5da9ef9e5e6e1cef703efa0c9416ee8168_ppc64le as a component of multicluster engine for Kubernetes 2.8*, *, *
Red Hatregistry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:73479093b4db12088996a727d2e4c561896b9fd23e82fd3eb2b0d92002e3878b_arm64 as a component of multicluster engine for Kubernetes 2.8*, *, *
Red Hatregistry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:570e694be5fef0b3dfb50b286218379c9b386e23e336dacf9fbc3beaacc27a10_ppc64le as a component of multicluster engine for Kubernetes 2.8*

…and 90 more

Timeline

  • Aug 25, 2026 CVE Published
  • Oct 25, 2026 CVE Updated
  • Oct 25, 2026 Distribution Patch
  • Oct 25, 2026 Distribution Patch
  • Oct 25, 2026 Security Advisory
  • Oct 25, 2026 Security Advisory
  • Oct 25, 2026 Security Advisory
  • Oct 25, 2026 Security Advisory
  • Oct 25, 2026 Security Advisory
  • Oct 25, 2026 Security Advisory
  • Oct 25, 2026 Security Advisory
  • Oct 25, 2026 Security Advisory

References

…and 167 more

Open in Interactive Console →
$ Console Community · 50/day Open console ›