AZL-87555

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-87555.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-87555

Upstream

CVE-2026-25681

Published

2026-05-22T16:16:19Z

Modified

2026-08-30T05:26:50Z

Summary

CVE-2026-25681 affecting package containerized-data-importer for versions less than 1.62.0-6

Details

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-25681

Affected packages

Azure Linux:3 / containerized-data-importer

Package

Name: containerized-data-importer
Purl: pkg:rpm/azure-linux/containerized-data-importer

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.62.0-6

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-87555.json"