DHI-o2tb-y3rx-hxfz-bthm
- Source
- https://scout.docker.com/v/DHI-o2tb-y3rx-hxfz-bthm
- Import Source
- https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-o2tb-y3rx-hxfz-bthm.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DHI-o2tb-y3rx-hxfz-bthm
- Upstream
- CVE-2026-56858
- Published
- 2026-11-10T22:09:25Z
- Modified
- 2026-11-10T22:15:03Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject…
- Details
-
Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.
- References
-
- https://scout.docker.com/v/DHI-o2tb-y3rx-hxfz-bthm
- https://nvd.nist.gov/vuln/detail/CVE-2026-56858
- https://errata.almalinux.org/9/ALSA-2026-60304.html
- https://access.redhat.com/errata/RHSA-2026:60304
- https://errata.almalinux.org/8/ALSA-2026-60305.html
- https://access.redhat.com/errata/RHSA-2026:60305
- https://errata.almalinux.org/9/ALSA-2026-62406.html
- https://access.redhat.com/errata/RHSA-2026:62406
- https://errata.almalinux.org/8/ALSA-2026-62407.html
- https://access.redhat.com/errata/RHSA-2026:62407
- https://errata.almalinux.org/8/ALSA-2026-63124.html
- https://access.redhat.com/errata/RHSA-2026:63124
- https://errata.almalinux.org/9/ALSA-2026-63136.html
- https://access.redhat.com/errata/RHSA-2026:63136
- https://errata.almalinux.org/8/ALSA-2026-63163.html
- https://access.redhat.com/errata/RHSA-2026:63163
- https://errata.almalinux.org/9/ALSA-2026-65117.html
- https://access.redhat.com/errata/RHSA-2026:65117
- https://errata.almalinux.org/9/ALSA-2026-65153.html
- https://access.redhat.com/errata/RHSA-2026:65153
- https://errata.almalinux.org/8/ALSA-2026-66016.html
- https://access.redhat.com/errata/RHSA-2026:66016
- https://errata.almalinux.org/9/ALSA-2026-69961.html
- https://access.redhat.com/errata/RHSA-2026:69961
- https://errata.almalinux.org/9/ALSA-2026-70391.html
- https://access.redhat.com/errata/RHSA-2026:70391
- https://errata.almalinux.org/9/ALSA-2026-70640.html
- https://access.redhat.com/errata/RHSA-2026:70640
- https://errata.almalinux.org/9/ALSA-2026-70641.html
- https://access.redhat.com/errata/RHSA-2026:70641
- https://alas.aws.amazon.com/AL2/ALAS-2026-3893.html
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56865
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56864
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818
- https://alas.aws.amazon.com/AL2023/ALAS-2026-2114.html
- https://security-tracker.debian.org/tracker/CVE-2026-56858
- https://pkg.go.dev/vuln/GO-2026-6091
- https://linux.oracle.com/cve/ELSA-2026-60304-0.html
- https://linux.oracle.com/errata/ELSA-2026-60304-0.html
- https://linux.oracle.com/cve/ELSA-2026-60305-0.html
- https://linux.oracle.com/errata/ELSA-2026-60305-0.html
- https://linux.oracle.com/cve/ELSA-2026-60306-0.html
- https://linux.oracle.com/errata/ELSA-2026-60306-0.html
- https://linux.oracle.com/cve/ELSA-2026-62406-0.html
- https://linux.oracle.com/errata/ELSA-2026-62406-0.html
- https://linux.oracle.com/cve/ELSA-2026-62407-0.html
- https://linux.oracle.com/errata/ELSA-2026-62407-0.html
- https://linux.oracle.com/cve/ELSA-2026-63022-0.html
- https://linux.oracle.com/errata/ELSA-2026-63022-0.html
- https://linux.oracle.com/cve/ELSA-2026-63119-0.html
- https://linux.oracle.com/errata/ELSA-2026-63119-0.html
- https://linux.oracle.com/cve/ELSA-2026-63124-0.html
- https://linux.oracle.com/errata/ELSA-2026-63124-0.html
- https://linux.oracle.com/cve/ELSA-2026-63136-0.html
- https://linux.oracle.com/errata/ELSA-2026-63136-0.html
- https://linux.oracle.com/cve/ELSA-2026-63163-0.html
- https://linux.oracle.com/errata/ELSA-2026-63163-0.html
- https://linux.oracle.com/cve/ELSA-2026-63332-0.html
- https://linux.oracle.com/errata/ELSA-2026-63332-0.html
- https://linux.oracle.com/cve/ELSA-2026-64777-0.html
- https://linux.oracle.com/errata/ELSA-2026-64777-0.html
- https://linux.oracle.com/cve/ELSA-2026-64818-0.html
- https://linux.oracle.com/errata/ELSA-2026-64818-0.html
- https://linux.oracle.com/cve/ELSA-2026-65153-0.html
- https://linux.oracle.com/errata/ELSA-2026-65153-0.html
- https://linux.oracle.com/cve/ELSA-2026-65534-0.html
- https://linux.oracle.com/errata/ELSA-2026-65534-0.html
- https://linux.oracle.com/cve/ELSA-2026-65886-0.html
- https://linux.oracle.com/errata/ELSA-2026-65886-0.html
- https://linux.oracle.com/cve/ELSA-2026-65895-0.html
- https://linux.oracle.com/errata/ELSA-2026-65895-0.html
- https://linux.oracle.com/cve/ELSA-2026-69961.html
- https://linux.oracle.com/errata/ELSA-2026-69961.html
- https://linux.oracle.com/cve/ELSA-2026-70201.html
- https://linux.oracle.com/errata/ELSA-2026-70201.html
- https://linux.oracle.com/cve/ELSA-2026-70391.html
- https://linux.oracle.com/errata/ELSA-2026-70391.html
- https://linux.oracle.com/cve/ELSA-2026-70640.html
- https://linux.oracle.com/errata/ELSA-2026-70640.html
- https://linux.oracle.com/cve/ELSA-2026-70641.html
- https://linux.oracle.com/errata/ELSA-2026-70641.html
- https://access.redhat.com/security/cve/CVE-2026-56858
- https://errata.rockylinux.org/RLSA-2026:60304
- https://errata.rockylinux.org/RLSA-2026:60305
- https://errata.rockylinux.org/RLSA-2026:60306
- https://errata.rockylinux.org/RLSA-2026:62406
- https://errata.rockylinux.org/RLSA-2026:62407
- https://errata.rockylinux.org/RLSA-2026:63022
- https://errata.rockylinux.org/RLSA-2026:63119
- https://errata.rockylinux.org/RLSA-2026:63124
- https://errata.rockylinux.org/RLSA-2026:63136
- https://errata.rockylinux.org/RLSA-2026:63163
- https://errata.rockylinux.org/RLSA-2026:63332
- https://errata.rockylinux.org/RLSA-2026:64777
- https://errata.rockylinux.org/RLSA-2026:64818
- https://errata.rockylinux.org/RLSA-2026:65116
- https://errata.rockylinux.org/RLSA-2026:65117
- https://errata.rockylinux.org/RLSA-2026:65153
- https://errata.rockylinux.org/RLSA-2026:65534
- https://errata.rockylinux.org/RLSA-2026:65886
- https://errata.rockylinux.org/RLSA-2026:65895
- https://errata.rockylinux.org/RLSA-2026:66016
- https://errata.rockylinux.org/RLSA-2026:69961
- https://errata.rockylinux.org/RLSA-2026:70201
- https://errata.rockylinux.org/RLSA-2026:70391
- https://errata.rockylinux.org/RLSA-2026:70640
- https://errata.rockylinux.org/RLSA-2026:70641
- https://ubuntu.com/security/CVE-2026-56858
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2026-56858
- https://github.com/golang/go/issues/80435
Affected packages
Docker Hardened Images:Alpine:3.23
tailscale-dev
Package
- Name
- tailscale-dev
- Purl
- pkg:apk/dhi/tailscale-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-fips-dev
Package
- Name
- tailscale-fips-dev
- Purl
- pkg:apk/dhi/tailscale-fips-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-fips
Package
- Name
- tailscale-fips
- Purl
- pkg:apk/dhi/tailscale-fips
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-nameserver-dev
Package
- Name
- tailscale-k8s-nameserver-dev
- Purl
- pkg:apk/dhi/tailscale-k8s-nameserver-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-nameserver-fips-dev
Package
- Name
- tailscale-k8s-nameserver-fips-dev
- Purl
- pkg:apk/dhi/tailscale-k8s-nameserver-fips-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-nameserver-fips
Package
- Name
- tailscale-k8s-nameserver-fips
- Purl
- pkg:apk/dhi/tailscale-k8s-nameserver-fips
Affected versions
1.*
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-nameserver
Package
- Name
- tailscale-k8s-nameserver
- Purl
- pkg:apk/dhi/tailscale-k8s-nameserver
Affected versions
1.*
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-operator-dev
Package
- Name
- tailscale-k8s-operator-dev
- Purl
- pkg:apk/dhi/tailscale-k8s-operator-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-operator-fips-dev
Package
- Name
- tailscale-k8s-operator-fips-dev
- Purl
- pkg:apk/dhi/tailscale-k8s-operator-fips-dev
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-operator-fips
Package
- Name
- tailscale-k8s-operator-fips
- Purl
- pkg:apk/dhi/tailscale-k8s-operator-fips
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale-k8s-operator
Package
- Name
- tailscale-k8s-operator
- Purl
- pkg:apk/dhi/tailscale-k8s-operator
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1
tailscale
Package
- Name
- tailscale
- Purl
- pkg:apk/dhi/tailscale
Affected versions
1.*
1.98.1-r0
1.98.2-r0
1.98.2-r1
1.98.2-r2
1.98.3-r0
1.98.3-r1
1.98.3-r2
1.98.4-r0
1.98.5-r0
1.98.5-r1
1.100.0-r0
1.100.0-r1
1.100.0-r2
1.100.0-r3
1.100.0-r4
1.100.0-r5
1.102.0-r0
1.102.0-r1
1.102.2-r0
1.102.2-r1
1.102.3-r0
1.102.3-r1
1.102.3-r2
1.102.3-r3
1.102.3-r4
1.102.4-r0
1.102.5-r0
1.104.0-r0
1.104.1-r0
1.104.1-r1
1.104.1-r2
1.104.2-r0
1.104.4-r0
1.104.4-r1
1.104.5-r0
1.104.5-r1