Threats tagged 'cleanstart-2026-eo92718'

CVE-2026-97045 is a medium severity vulnerability in the kedacore-http-add-on affecting versions prior to 0.16.0-r0 and 0.18.1-r13. The issue involves the function childTextNodesAreLiteral, where the logic for walking up the DOM tree incorrectly stopped at the nearest foreign ancestor upon encountering an HTML integration point. This could lead to partial bypass or incorrect processing of HTML content. A fix is available in versions 0.16.0-r0 and 0.18.1-r13.