AZL-111526

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111526.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-111526

Upstream

CVE-2026-114538

Published

2026-10-30T04:18:12Z

Modified

2026-10-31T05:32:45Z

Summary

CVE-2026-114538 affecting package debootstrap 1.0.128+nmu2-1

Details

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Bootstrap allows Cross-Site Scripting (XSS). This issue affects Bootstrap versions: from 0.0.0 to 3.45.0.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-114538

Affected packages

Azure Linux:3 / debootstrap

Package

Name: debootstrap
Purl: pkg:rpm/azure-linux/debootstrap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

1.0.128+nmu2-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111526.json"