[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-42506":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T17:19:26.604Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":44,"aliases":45,"duplicate_of":9,"upstream":47,"downstream":48,"duplicates":111,"related":112,"reserved_at":9,"published_at":144,"modified_at":145,"state":146,"summary":147,"references_raw":156,"kevs":181,"epss":182,"epss_history":185,"metrics":318,"affected":326},"CVE-2026-42506","Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-79","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","weakness","Stable","Base","High",[20,24,28,32,36,40],{"id":21,"name":22,"techniques":23},"CAPEC-209","XSS Using MIME Type Mismatch",[],{"id":25,"name":26,"techniques":27},"CAPEC-588","DOM-Based XSS",[],{"id":29,"name":30,"techniques":31},"CAPEC-591","Reflected XSS",[],{"id":33,"name":34,"techniques":35},"CAPEC-592","Stored XSS",[],{"id":37,"name":38,"techniques":39},"CAPEC-63","Cross-Site Scripting (XSS)",[],{"id":41,"name":42,"techniques":43},"CAPEC-85","AJAX Footprinting",[],[],[46],"GO-2026-5025",[],[49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109],{"_key":50},"OPENSUSE-SU-2026:10856-1",{"_key":52},"OPENSUSE-SU-2026:10930-1",{"_key":54},"OPENSUSE-SU-2026:10923-1",{"_key":56},"OPENSUSE-SU-2026:10941-1",{"_key":58},"UBUNTU-CVE-2026-42506",{"_key":60},"OPENSUSE-SU-2026:11013-1",{"_key":62},"SUSE-SU-2026:22074-1",{"_key":64},"SUSE-SU-2026:22075-1",{"_key":66},"SUSE-SU-2026:22066-1",{"_key":68},"SUSE-SU-2026:22065-1",{"_key":70},"DEBIAN-CVE-2026-42506",{"_key":72},"OPENSUSE-SU-2026:20963-1",{"_key":74},"OPENSUSE-SU-2026:20956-1",{"_key":76},"SUSE-SU-2026:22193-1",{"_key":78},"SUSE-SU-2026:22226-1",{"_key":80},"OPENSUSE-SU-2026:20984-1",{"_key":82},"OPENSUSE-SU-2026:11126-1",{"_key":84},"SUSE-SU-2026:2706-1",{"_key":86},"SUSE-SU-2026:2733-1",{"_key":88},"SUSE-SU-2026:2768-1",{"_key":90},"SUSE-SU-2026:2824-1",{"_key":92},"SUSE-SU-2026:2827-1",{"_key":94},"OPENSUSE-SU-2026:21120-1",{"_key":96},"OPENSUSE-SU-2026:21251-1",{"_key":98},"OPENSUSE-SU-2026:21262-1",{"_key":100},"SUSE-SU-2026:22575-1",{"_key":102},"SUSE-SU-2026:22613-1",{"_key":104},"SUSE-SU-2026:3056-1",{"_key":106},"OPENSUSE-SU-2026:11290-1",{"_key":108},"OPENSUSE-SU-2026:21281-1",{"_key":110},"OPENSUSE-SU-2026:21367-1",[],[113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142],{"_key":50},{"_key":52},{"_key":54},{"_key":56},{"_key":60},{"_key":62},{"_key":64},{"_key":66},{"_key":68},{"_key":72},{"_key":74},{"_key":76},{"_key":78},{"_key":80},{"_key":82},{"_key":84},{"_key":86},{"_key":88},{"_key":90},{"_key":92},{"_key":94},{"_key":96},{"_key":98},{"_key":100},{"_key":102},{"_key":104},{"_key":106},{"_key":108},{"_key":110},{"_key":143},"CGA-C62R-25JR-FMQG","2026-05-22T15:01:21.056Z","2026-05-22T17:45:49.989Z","Analyzed",{"cisa_kev":148,"cisa_ransomware":148,"cisa_vendor":9,"epss_severity":149,"epss_score":150,"severity":151,"severity_score":152,"severity_version":153,"severity_source":154,"severity_vector":155,"severity_status":146},false,"low",0.00188,"medium",6.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",[157,165,171,176],{"url":158,"sources":159,"tags":162},"https://go.dev/issue/79571",[154,160,161],"osv_go","nvd",[163,164],"REPORT","Issue Tracking",{"url":166,"sources":167,"tags":168},"https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",[154,160,161],[169,170],"WEB","Mailing List",{"url":172,"sources":173,"tags":174},"https://go.dev/cl/781700",[154,160,161],[175,164],"FIX",{"url":177,"sources":178,"tags":179},"https://pkg.go.dev/vuln/GO-2026-5025",[154,161],[180],"Vendor Advisory",[],{"date":183,"score":150,"percentile":184},"2026-07-05",0.08582,[186,190,193,196,199,202,206,209,213,216,219,222,225,228,231,234,237,240,243,246,249,252,254,257,261,264,267,270,273,276,279,282,285,288,291,294,297,300,303,305,308,311,314,317],{"date":187,"score":188,"percentile":189},"2026-05-23",0.00031,0.09112,{"date":191,"score":188,"percentile":192},"2026-05-24",0.09113,{"date":194,"score":188,"percentile":195},"2026-05-25",0.09098,{"date":197,"score":188,"percentile":198},"2026-05-26",0.09092,{"date":200,"score":188,"percentile":201},"2026-05-27",0.0915,{"date":203,"score":204,"percentile":205},"2026-05-28",0.00033,0.10176,{"date":207,"score":204,"percentile":208},"2026-05-29",0.10212,{"date":210,"score":211,"percentile":212},"2026-05-30",0.00032,0.09791,{"date":214,"score":211,"percentile":215},"2026-05-31",0.09772,{"date":217,"score":211,"percentile":218},"2026-06-01",0.09744,{"date":220,"score":211,"percentile":221},"2026-06-02",0.09711,{"date":223,"score":211,"percentile":224},"2026-06-03",0.0967,{"date":226,"score":211,"percentile":227},"2026-06-04",0.09684,{"date":229,"score":211,"percentile":230},"2026-06-05",0.09724,{"date":232,"score":211,"percentile":233},"2026-06-06",0.09742,{"date":235,"score":211,"percentile":236},"2026-06-07",0.09716,{"date":238,"score":211,"percentile":239},"2026-06-08",0.09659,{"date":241,"score":211,"percentile":242},"2026-06-09",0.09693,{"date":244,"score":211,"percentile":245},"2026-06-10",0.09736,{"date":247,"score":211,"percentile":248},"2026-06-11",0.0978,{"date":250,"score":211,"percentile":251},"2026-06-12",0.09829,{"date":253,"score":211,"percentile":251},"2026-06-13",{"date":255,"score":211,"percentile":256},"2026-06-14",0.09816,{"date":258,"score":259,"percentile":260},"2026-06-15",0.00249,0.15915,{"date":262,"score":259,"percentile":263},"2026-06-16",0.15937,{"date":265,"score":259,"percentile":266},"2026-06-17",0.15939,{"date":268,"score":259,"percentile":269},"2026-06-18",0.1595,{"date":271,"score":259,"percentile":272},"2026-06-19",0.1594,{"date":274,"score":259,"percentile":275},"2026-06-20",0.15932,{"date":277,"score":259,"percentile":278},"2026-06-21",0.15921,{"date":280,"score":259,"percentile":281},"2026-06-22",0.1591,{"date":283,"score":150,"percentile":284},"2026-06-23",0.0849,{"date":286,"score":150,"percentile":287},"2026-06-24",0.08503,{"date":289,"score":150,"percentile":290},"2026-06-25",0.08588,{"date":292,"score":150,"percentile":293},"2026-06-26",0.08614,{"date":295,"score":150,"percentile":296},"2026-06-27",0.08636,{"date":298,"score":150,"percentile":299},"2026-06-28",0.086,{"date":301,"score":150,"percentile":302},"2026-06-29",0.08591,{"date":304,"score":150,"percentile":302},"2026-06-30",{"date":306,"score":150,"percentile":307},"2026-07-01",0.08625,{"date":309,"score":150,"percentile":310},"2026-07-02",0.08609,{"date":312,"score":150,"percentile":313},"2026-07-03",0.08585,{"date":315,"score":150,"percentile":316},"2026-07-04",0.08587,{"date":183,"score":150,"percentile":184},[319,324],{"source":154,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":320,"cvss_v4_0":9},{"baseScore":152,"baseSeverity":321,"vectorString":155,"impactScore":322,"exploitabilityScore":323},"MEDIUM",4.5,7.2,{"source":161,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":325,"cvss_v4_0":9},{"baseScore":152,"baseSeverity":321,"vectorString":155,"impactScore":322,"exploitabilityScore":323},[327,340,346],{"ecosystem":328,"name":329,"vendor":330,"product":331,"cpe_part":9,"purl_type":332,"purl_namespace":330,"purl_name":331,"source":9,"versions":333},"Go","golang.org/x/net","golang.org/x","net","golang",[334],{"version":335,"is_range":336,"range_type":337,"version_start":9,"version_start_type":9,"version_end":338,"version_end_type":339,"fixed_in":9},"lt0_55_0",true,"semver","0.55.0","excluding",{"ecosystem":9,"name":331,"vendor":332,"product":331,"cpe_part":341,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":342},"a",[343],{"version":344,"is_range":336,"range_type":345,"version_start":9,"version_start_type":9,"version_end":338,"version_end_type":339,"fixed_in":9},"lt0.55.0","cpe",{"ecosystem":9,"name":347,"vendor":329,"product":347,"cpe_part":341,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":348},"golang.org/x/net/html",[349],{"version":350,"is_range":336,"range_type":154,"version_start":9,"version_start_type":9,"version_end":338,"version_end_type":339,"fixed_in":9},"\u003C 0.55.0"]