CVE-2026-39823

ADVISORY - nist

Summary

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the attribute, the escaper would fail to similarly escape it, leading to XSS.

EPSS Score⁠: 0.00011 (0.015)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-noinfo⁠

Impacted images

Advisories

GoLang

CREATED

3 days ago

UPDATED

3 days ago

ADVISORY IDGO-2026-4982⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
stdlib	golang	-	-	<1.25.10	1.25.10
stdlib	golang	-	-	>=1.26.0-0,<1.26.3	1.26.3

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

3 days ago

UPDATED

2 days ago

ADVISORY IDCVE-2026-39823⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-noinfo⁠

CVSS SCORE

6.1medium

Debian

CREATED

2 days ago

UPDATED

2 days ago

ADVISORY IDCVE-2026-39823⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

CGA-x3r8-cgg4-9q3g

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-32vf-g6hx-c2h7

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-349m-qr27-qj7h

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

19 hours ago

UPDATED

19 hours ago

ADVISORY ID

MINI-76mp-49g7-w5x2

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

7 hours ago

UPDATED

7 hours ago

ADVISORY ID

MINI-7cjw-w3jp-vjgg

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-cc42-p7wh-6vc5

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

7 hours ago

UPDATED

7 hours ago

ADVISORY ID

MINI-gffj-v69x-3mwh

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-m9mg-wgvw-3wgp

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

1 day ago

UPDATED

1 day ago

ADVISORY ID

MINI-mhr7-8c2q-6w4q

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-r4w3-32qj-v6w2

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

13 hours ago

UPDATED

13 hours ago

ADVISORY ID

MINI-ww7w-7m48-24r5

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-x7m2-q69g-5c2c

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY