Vulnerability-Lookup

RHSA-2026:54527

Vulnerability from csaf_redhat - Published: 2026-08-13 10:28 - Updated: 2026-08-22 08:40

Summary

Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1

Severity

Important

Notes

Topic: cert-manager Operator for Red Hat OpenShift 1.19.1

Details: The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to developers working within your Kubernetes cluster.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-25681

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-27136

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-42502

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le	—	Vendor Fix fix Workaround

Threats

Impact Moderate

References

29 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:54527	self
https://access.redhat.com/security/cve/CVE-2026-25681	external
https://access.redhat.com/security/cve/CVE-2026-27136	external
https://access.redhat.com/security/cve/CVE-2026-42502	external
https://access.redhat.com/security/updates/classi…	external
https://docs.openshift.com/container-platform/lat…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-25681	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480761	external
https://www.cve.org/CVERecord?id=CVE-2026-25681	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25681	external
https://go.dev/cl/781703	external
https://go.dev/issue/79574	external
https://groups.google.com/g/golang-announce/c/iI-…	external
https://pkg.go.dev/vuln/GO-2026-5029	external
https://access.redhat.com/security/cve/CVE-2026-27136	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480757	external
https://www.cve.org/CVERecord?id=CVE-2026-27136	external
https://nvd.nist.gov/vuln/detail/CVE-2026-27136	external
https://go.dev/cl/781685	external
https://go.dev/issue/79575	external
https://pkg.go.dev/vuln/GO-2026-5030	external
https://access.redhat.com/security/cve/CVE-2026-42502	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480762	external
https://www.cve.org/CVERecord?id=CVE-2026-42502	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42502	external
https://go.dev/cl/781701	external
https://go.dev/issue/79572	external
https://pkg.go.dev/vuln/GO-2026-5027	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "cert-manager Operator for Red Hat OpenShift 1.19.1",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities\nand certificates as first-class resource types in the Kubernetes API. This makes it possible to provide\ncertificates-as-a-service to developers working within your Kubernetes cluster.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:54527",
        "url": "https://access.redhat.com/errata/RHSA-2026:54527"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42502"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html",
        "url": "https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54527.json"
      }
    ],
    "title": "Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1",
    "tracking": {
      "current_release_date": "2026-08-22T08:40:58+00:00",
      "generator": {
        "date": "2026-08-22T08:40:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:54527",
      "initial_release_date": "2026-08-13T10:28:53+00:00",
      "revision_history": [
        {
          "date": "2026-08-13T10:28:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-15T05:55:47+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-22T08:40:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Cert Manager support for Red Hat OpenShift release 1.19",
                "product": {
                  "name": "Cert Manager support for Red Hat OpenShift release 1.19",
                  "product_id": "Cert Manager support for Red Hat OpenShift release 1.19",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:cert_manager:1.19::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Cert Manager support for Red Hat OpenShift release"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
                "product": {
                  "name": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
                  "product_id": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cert-manager-istio-csr-rhel9@sha256%3A6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa?arch=amd64\u0026repository_url=registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9\u0026tag=1786615335"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
                "product": {
                  "name": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
                  "product_id": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cert-manager-istio-csr-rhel9@sha256%3A4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad?arch=s390x\u0026repository_url=registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9\u0026tag=1786615335"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le",
                "product": {
                  "name": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le",
                  "product_id": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cert-manager-istio-csr-rhel9@sha256%3Aa32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d?arch=ppc64le\u0026repository_url=registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9\u0026tag=1786615335"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
                "product": {
                  "name": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
                  "product_id": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cert-manager-istio-csr-rhel9@sha256%3A3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a?arch=arm64\u0026repository_url=registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9\u0026tag=1786615335"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
          "product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64"
        },
        "product_reference": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
        "relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.19",
          "product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x"
        },
        "product_reference": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
        "relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
          "product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64"
        },
        "product_reference": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
        "relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le as a component of Cert Manager support for Red Hat OpenShift release 1.19",
          "product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le"
        },
        "product_reference": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le",
        "relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-25681",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:08.177603+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
          "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
          "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
          "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781703",
          "url": "https://go.dev/cl/781703"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79574",
          "url": "https://go.dev/issue/79574"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5029",
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "release_date": "2026-05-22T15:01:21.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-13T10:28:53+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
          "product_ids": [
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:54527"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
          "product_ids": [
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
    },
    {
      "cve": "CVE-2026-27136",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:00:56.609820+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
          "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
          "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
          "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781685",
          "url": "https://go.dev/cl/781685"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79575",
          "url": "https://go.dev/issue/79575"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5030",
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "release_date": "2026-05-22T15:01:22.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-13T10:28:53+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
          "product_ids": [
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:54527"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
    },
    {
      "cve": "CVE-2026-42502",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:11.151484+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480762"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
          "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
          "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
          "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480762",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781701",
          "url": "https://go.dev/cl/781701"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79572",
          "url": "https://go.dev/issue/79572"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5027",
          "url": "https://pkg.go.dev/vuln/GO-2026-5027"
        }
      ],
      "release_date": "2026-05-22T15:01:21.649000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-13T10:28:53+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
          "product_ids": [
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:54527"
        },
        {
          "category": "workaround",
          "details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
          "product_ids": [
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64",
            "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
    }
  ]
}

CVE-2026-25681 (GCVE-0-2026-25681)

Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-05-22 17:46

Title

Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html

Summary

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 17:46 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/79574
https://groups.google.com/g/golang-announce/c/iI-…
https://go.dev/cl/781703
https://pkg.go.dev/vuln/GO-2026-5029

Impacted products

1 product

Vendor	Product	Version
golang.org/x/net	golang.org/x/net/html	Affected: 0 , < 0.55.0 (semver)

Credits

ensy

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-25681",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T17:46:00.775026Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T17:46:20.366Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/html",
          "product": "golang.org/x/net/html",
          "programRoutines": [
            {
              "name": "parser.parse"
            },
            {
              "name": "Parse"
            },
            {
              "name": "ParseFragment"
            },
            {
              "name": "ParseFragmentWithOptions"
            },
            {
              "name": "ParseWithOptions"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.55.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ensy"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T15:01:21.975Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79574"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "url": "https://go.dev/cl/781703"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "title": "Invoking  incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-25681",
    "datePublished": "2026-05-22T15:01:21.975Z",
    "dateReserved": "2026-02-05T01:35:43.738Z",
    "dateUpdated": "2026-05-22T17:46:20.366Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-27136 (GCVE-0-2026-27136)

Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-05-22 16:59

Title

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Summary

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 16:59 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/79575
https://groups.google.com/g/golang-announce/c/iI-…
https://go.dev/cl/781685
https://pkg.go.dev/vuln/GO-2026-5030

Impacted products

1 product

Vendor	Product	Version
golang.org/x/net	golang.org/x/net/html	Affected: 0 , < 0.55.0 (semver)

Credits

ensy

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-27136",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T16:59:35.355098Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T16:59:52.807Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/html",
          "product": "golang.org/x/net/html",
          "programRoutines": [
            {
              "name": "parser.parse"
            },
            {
              "name": "Parse"
            },
            {
              "name": "ParseFragment"
            },
            {
              "name": "ParseFragmentWithOptions"
            },
            {
              "name": "ParseWithOptions"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.55.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ensy"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T15:01:22.111Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79575"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "url": "https://go.dev/cl/781685"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "title": "Invoking  duplicate attributes can cause XSS in golang.org/x/net/html"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-27136",
    "datePublished": "2026-05-22T15:01:22.111Z",
    "dateReserved": "2026-02-17T19:57:28.434Z",
    "dateUpdated": "2026-05-22T16:59:52.807Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42502 (GCVE-0-2026-42502)

Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-05-22 17:17

Title

Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html

Summary

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 17:16 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/79572
https://groups.google.com/g/golang-announce/c/iI-…
https://go.dev/cl/781701
https://pkg.go.dev/vuln/GO-2026-5027

Impacted products

1 product

Vendor	Product	Version
golang.org/x/net	golang.org/x/net/html	Affected: 0 , < 0.55.0 (semver)

Credits

Tristan Madani

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-42502",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T17:16:33.414557Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T17:17:20.637Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/html",
          "product": "golang.org/x/net/html",
          "programRoutines": [
            {
              "name": "parser.parse"
            },
            {
              "name": "Parse"
            },
            {
              "name": "ParseFragment"
            },
            {
              "name": "ParseFragmentWithOptions"
            },
            {
              "name": "ParseWithOptions"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.55.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Tristan Madani"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T15:01:21.649Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79572"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "url": "https://go.dev/cl/781701"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5027"
        }
      ],
      "title": "Invoking  incorrect handling of HTML elements in foreign content in golang.org/x/net/html"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-42502",
    "datePublished": "2026-05-22T15:01:21.649Z",
    "dateReserved": "2026-04-28T00:21:12.791Z",
    "dateUpdated": "2026-05-22T17:17:20.637Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2026:54527

CVE-2026-25681 (GCVE-0-2026-25681)

CVE-2026-27136 (GCVE-0-2026-27136)

CVE-2026-42502 (GCVE-0-2026-42502)

Tags

Sightings

Nomenclature