Back to search
CVE-2026-27136
Published: May 22, 2026
Modified: May 22, 2026
PUBLISHED
Description
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
| Vendor | Product | Versions |
|---|---|---|
golang.org/x/net | golang.org/x/net/html | affected 0 - < 0.55.0 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now