AZL-98700
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-98700.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-98700
- Upstream
- Published
- 2026-05-07T20:16:43Z
- Modified
- 2026-09-10T05:28:36Z
- Summary
- CVE-2026-39823 affecting package golang 1.27.1-1
- Details
-
CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the attribute, the escaper would fail to similarly escape it, leading to XSS.
- References