[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-27136":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T17:19:26.604Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":159,"aliases":160,"duplicate_of":9,"upstream":162,"downstream":163,"duplicates":234,"related":235,"reserved_at":9,"published_at":271,"modified_at":272,"state":273,"summary":274,"references_raw":283,"kevs":308,"epss":309,"epss_history":312,"metrics":445,"affected":453},"CVE-2026-27136","Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-1021","Improper Restriction of Rendered UI Layers or Frames","The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.","weakness","Incomplete","Base",[19,23,27,31,51,55,59],{"id":20,"name":21,"techniques":22},"CAPEC-103","Clickjacking",[],{"id":24,"name":25,"techniques":26},"CAPEC-181","Flash File Overlay",[],{"id":28,"name":29,"techniques":30},"CAPEC-222","iFrame Overlay",[],{"id":32,"name":33,"techniques":34},"CAPEC-504","Task Impersonation",[35],{"id":36,"name":37,"tactics":38,"countermeasures":45},"T1036.004","Masquerade Task or Service",[39,42],{"id":40,"name":41},"TA0030","Defense Evasion",{"id":43,"name":44},"TA0005","Stealth",[46],{"id":47,"name":48,"tactic":49},"D3-SJA","Scheduled Job Analysis",{"name":50},"Detect",{"id":52,"name":53,"techniques":54},"CAPEC-506","Tapjacking",[],{"id":56,"name":57,"techniques":58},"CAPEC-587","Cross Frame Scripting (XFS)",[],{"id":60,"name":61,"techniques":62},"CAPEC-654","Credential Prompt Impersonation",[63,130],{"id":64,"name":65,"tactics":66,"countermeasures":73},"T1056","Input Capture",[67,70],{"id":68,"name":69},"TA0100","Collection",{"id":71,"name":72},"TA0031","Credential Access",[74,79,83,87,91,95,99,103,108,112,116,120,125],{"id":75,"name":76,"tactic":77},"D3-HCI","Hardware Component Inventory",{"name":78},"Model",{"id":80,"name":81,"tactic":82},"D3-SWI","Software Inventory",{"name":78},{"id":84,"name":85,"tactic":86},"D3-AVE","Asset Vulnerability Enumeration",{"name":78},{"id":88,"name":89,"tactic":90},"D3-IDA","Input Device Analysis",{"name":50},{"id":92,"name":93,"tactic":94},"D3-SBV","Service Binary Verification",{"name":50},{"id":96,"name":97,"tactic":98},"D3-MBT","Memory Boundary Tracking",{"name":50},{"id":100,"name":101,"tactic":102},"D3-PCSV","Process Code Segment Verification",{"name":50},{"id":104,"name":105,"tactic":106},"D3-RH","Radiation Hardening",{"name":107},"Harden",{"id":109,"name":110,"tactic":111},"D3-SU","Software Update",{"name":107},{"id":113,"name":114,"tactic":115},"D3-PSEP","Process Segment Execution Prevention",{"name":107},{"id":117,"name":118,"tactic":119},"D3-SAOR","Segment Address Offset Randomization",{"name":107},{"id":121,"name":122,"tactic":123},"D3-RS","Restore Software",{"name":124},"Restore",{"id":126,"name":127,"tactic":128},"D3-IOPR","IO Port Restriction",{"name":129},"Isolate",{"id":131,"name":132,"tactics":133,"countermeasures":138},"T1548.004","Elevated Execution with Prompt",[134,135],{"id":40,"name":41},{"id":136,"name":137},"TA0111","Privilege Escalation",[139,143,147,151,155],{"id":140,"name":141,"tactic":142},"D3-DI","Data Inventory",{"name":78},{"id":144,"name":145,"tactic":146},"D3-SCA","System Call Analysis",{"name":50},{"id":148,"name":149,"tactic":150},"D3-SCP","System Configuration Permissions",{"name":107},{"id":152,"name":153,"tactic":154},"D3-RD","Restore Database",{"name":124},{"id":156,"name":157,"tactic":158},"D3-SCF","System Call Filtering",{"name":129},[],[161],"GO-2026-5030",[],[164,166,168,170,172,174,176,178,180,182,184,186,188,190,192,194,196,198,200,202,204,206,208,210,212,214,216,218,220,222,224,226,228,230,232],{"_key":165},"OPENSUSE-SU-2026:10856-1",{"_key":167},"OPENSUSE-SU-2026:10930-1",{"_key":169},"OPENSUSE-SU-2026:10923-1",{"_key":171},"OPENSUSE-SU-2026:10941-1",{"_key":173},"UBUNTU-CVE-2026-27136",{"_key":175},"SUSE-SU-2026:22074-1",{"_key":177},"SUSE-SU-2026:22075-1",{"_key":179},"SUSE-SU-2026:22066-1",{"_key":181},"SUSE-SU-2026:22065-1",{"_key":183},"DEBIAN-CVE-2026-27136",{"_key":185},"OPENSUSE-SU-2026:20963-1",{"_key":187},"OPENSUSE-SU-2026:20956-1",{"_key":189},"SUSE-SU-2026:22193-1",{"_key":191},"SUSE-SU-2026:22226-1",{"_key":193},"OPENSUSE-SU-2026:20984-1",{"_key":195},"OPENSUSE-SU-2026:11126-1",{"_key":197},"SUSE-SU-2026:2706-1",{"_key":199},"SUSE-SU-2026:2733-1",{"_key":201},"SUSE-SU-2026:2768-1",{"_key":203},"SUSE-SU-2026:2824-1",{"_key":205},"SUSE-SU-2026:2827-1",{"_key":207},"OPENSUSE-SU-2026:11198-1",{"_key":209},"OPENSUSE-SU-2026:21120-1",{"_key":211},"OPENSUSE-SU-2026:21251-1",{"_key":213},"OPENSUSE-SU-2026:21262-1",{"_key":215},"SUSE-SU-2026:22575-1",{"_key":217},"SUSE-SU-2026:22613-1",{"_key":219},"SUSE-SU-2026:3056-1",{"_key":221},"RHSA-2026:37072",{"_key":223},"RHSA-2026:37123",{"_key":225},"OPENSUSE-SU-2026:11290-1",{"_key":227},"OPENSUSE-SU-2026:11305-1",{"_key":229},"OPENSUSE-SU-2026:11314-1",{"_key":231},"OPENSUSE-SU-2026:21281-1",{"_key":233},"OPENSUSE-SU-2026:21367-1",[],[236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269],{"_key":165},{"_key":167},{"_key":169},{"_key":171},{"_key":175},{"_key":177},{"_key":179},{"_key":181},{"_key":185},{"_key":187},{"_key":189},{"_key":191},{"_key":193},{"_key":195},{"_key":197},{"_key":199},{"_key":201},{"_key":203},{"_key":205},{"_key":221},{"_key":223},{"_key":207},{"_key":209},{"_key":211},{"_key":213},{"_key":215},{"_key":217},{"_key":219},{"_key":225},{"_key":227},{"_key":229},{"_key":231},{"_key":233},{"_key":270},"CGA-93VF-2MJ3-5W9P","2026-05-22T15:01:22.111Z","2026-05-22T16:59:52.807Z","Analyzed",{"cisa_kev":275,"cisa_ransomware":275,"cisa_vendor":9,"epss_severity":276,"epss_score":277,"severity":278,"severity_score":279,"severity_version":280,"severity_source":281,"severity_vector":282,"severity_status":273},false,"low",0.00178,"medium",6.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",[284,292,298,303],{"url":285,"sources":286,"tags":289},"https://go.dev/issue/79575",[281,287,288],"osv_go","nvd",[290,291],"REPORT","Issue Tracking",{"url":293,"sources":294,"tags":295},"https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",[281,287,288],[296,297],"WEB","Mailing List",{"url":299,"sources":300,"tags":301},"https://go.dev/cl/781685",[281,287,288],[302,291],"FIX",{"url":304,"sources":305,"tags":306},"https://pkg.go.dev/vuln/GO-2026-5030",[281,288],[307],"Vendor Advisory",[],{"date":310,"score":277,"percentile":311},"2026-07-05",0.07541,[313,317,320,323,326,329,333,336,339,342,345,348,351,354,357,360,363,366,369,372,375,378,381,384,388,391,394,397,400,403,406,409,412,415,418,421,424,427,430,432,435,438,441,444],{"date":314,"score":315,"percentile":316},"2026-05-23",0.00031,0.09112,{"date":318,"score":315,"percentile":319},"2026-05-24",0.09113,{"date":321,"score":315,"percentile":322},"2026-05-25",0.09098,{"date":324,"score":315,"percentile":325},"2026-05-26",0.09092,{"date":327,"score":315,"percentile":328},"2026-05-27",0.0915,{"date":330,"score":331,"percentile":332},"2026-05-28",0.00033,0.10176,{"date":334,"score":331,"percentile":335},"2026-05-29",0.10212,{"date":337,"score":315,"percentile":338},"2026-05-30",0.09485,{"date":340,"score":315,"percentile":341},"2026-05-31",0.09465,{"date":343,"score":315,"percentile":344},"2026-06-01",0.09439,{"date":346,"score":315,"percentile":347},"2026-06-02",0.09384,{"date":349,"score":315,"percentile":350},"2026-06-03",0.09339,{"date":352,"score":315,"percentile":353},"2026-06-04",0.09356,{"date":355,"score":315,"percentile":356},"2026-06-05",0.09401,{"date":358,"score":315,"percentile":359},"2026-06-06",0.09418,{"date":361,"score":315,"percentile":362},"2026-06-07",0.09403,{"date":364,"score":315,"percentile":365},"2026-06-08",0.09343,{"date":367,"score":315,"percentile":368},"2026-06-09",0.09375,{"date":370,"score":315,"percentile":371},"2026-06-10",0.09417,{"date":373,"score":315,"percentile":374},"2026-06-11",0.0946,{"date":376,"score":315,"percentile":377},"2026-06-12",0.09513,{"date":379,"score":315,"percentile":380},"2026-06-13",0.09507,{"date":382,"score":315,"percentile":383},"2026-06-14",0.09496,{"date":385,"score":386,"percentile":387},"2026-06-15",0.00236,0.14336,{"date":389,"score":386,"percentile":390},"2026-06-16",0.14357,{"date":392,"score":386,"percentile":393},"2026-06-17",0.1435,{"date":395,"score":386,"percentile":396},"2026-06-18",0.14358,{"date":398,"score":386,"percentile":399},"2026-06-19",0.14346,{"date":401,"score":386,"percentile":402},"2026-06-20",0.1434,{"date":404,"score":386,"percentile":405},"2026-06-21",0.14329,{"date":407,"score":386,"percentile":408},"2026-06-22",0.14316,{"date":410,"score":277,"percentile":411},"2026-06-23",0.07468,{"date":413,"score":277,"percentile":414},"2026-06-24",0.07477,{"date":416,"score":277,"percentile":417},"2026-06-25",0.07545,{"date":419,"score":277,"percentile":420},"2026-06-26",0.07573,{"date":422,"score":277,"percentile":423},"2026-06-27",0.07589,{"date":425,"score":277,"percentile":426},"2026-06-28",0.0756,{"date":428,"score":277,"percentile":429},"2026-06-29",0.07563,{"date":431,"score":277,"percentile":426},"2026-06-30",{"date":433,"score":277,"percentile":434},"2026-07-01",0.07579,{"date":436,"score":277,"percentile":437},"2026-07-02",0.07562,{"date":439,"score":277,"percentile":440},"2026-07-03",0.0754,{"date":442,"score":277,"percentile":443},"2026-07-04",0.07542,{"date":310,"score":277,"percentile":311},[446,451],{"source":281,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":447,"cvss_v4_0":9},{"baseScore":279,"baseSeverity":448,"vectorString":282,"impactScore":449,"exploitabilityScore":450},"MEDIUM",4.5,7.2,{"source":288,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":452,"cvss_v4_0":9},{"baseScore":279,"baseSeverity":448,"vectorString":282,"impactScore":449,"exploitabilityScore":450},[454,467,473],{"ecosystem":455,"name":456,"vendor":457,"product":458,"cpe_part":9,"purl_type":459,"purl_namespace":457,"purl_name":458,"source":9,"versions":460},"Go","golang.org/x/net","golang.org/x","net","golang",[461],{"version":462,"is_range":463,"range_type":464,"version_start":9,"version_start_type":9,"version_end":465,"version_end_type":466,"fixed_in":9},"lt0_55_0",true,"semver","0.55.0","excluding",{"ecosystem":9,"name":458,"vendor":459,"product":458,"cpe_part":468,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":469},"a",[470],{"version":471,"is_range":463,"range_type":472,"version_start":9,"version_start_type":9,"version_end":465,"version_end_type":466,"fixed_in":9},"lt0.55.0","cpe",{"ecosystem":9,"name":474,"vendor":456,"product":474,"cpe_part":468,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":475},"golang.org/x/net/html",[476],{"version":477,"is_range":463,"range_type":281,"version_start":9,"version_start_type":9,"version_end":465,"version_end_type":466,"fixed_in":9},"\u003C 0.55.0"]