Threats Tagged 'cve-2026-65900'
View all threats tagged with 'cve-2026-65900'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-65900'
Click on any threat for detailed analysis and mitigation recommendations
0 A security update for Red Hat Hardened Images RPMs addresses multiple vulnerabilities including CVE-2026-65898 and related CVEs. The update involves the grafana12.4 package version 12.4.8-0.1.2.hum1 for aarch64 and x86_64 architectures. These vulnerabilities have medium severity and are fixed in this update. The advisory covers several CVEs related to these packages and provides a link for applying the update. Join the discussion | GCVE Database | 08/22/2026, 14:06:09 UTC Added: 08/22/2026, 22:51:41 UTC |
0 DOMPurify versions >=3.0.0 and before 3.4.8, when configured with SAFE_FOR_TEMPLATES together with a DOM output mode (RETURN_DOM, RETURN_DOM_FRAGMENT, or IN_PLACE), fail to strip template expressions (e.g. ${evil}, {{evil}}, <%evil%>) inside <template> element content. The final normalization/scrub pass (_scrubTemplateExpressions) uses a NodeIterator and node.normalize() that do not descend into template.content, so expressions that only form after adjacent text nodes merge survive sanitization. This bypasses SAFE_FOR_TEMPLATES and can allow a downstream template engine to evaluate attacker-supplied expressions. The string output path is not affected. Join the discussion | CVE Database V5 | 07/23/2026, 13:16:19 UTC Added: 07/23/2026, 13:22:42 UTC |
Showing 1 to 2 of 2 results