AZL-111626

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111626.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-111626

Upstream

CVE-2026-27136

Published

2026-05-22T16:16:20Z

Modified

2026-11-01T14:17:35Z

Summary

CVE-2026-27136 affecting package kubevirt-openvmm 1.9.0-1

Details

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-27136

Affected packages

Azure Linux:3 / kubevirt-openvmm

Package

Name: kubevirt-openvmm
Purl: pkg:rpm/azure-linux/kubevirt-openvmm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

1.9.0-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111626.json"