CVE-2026-42502

[opensourceways-bot]

一、漏洞信息
漏洞编号：CVE-2026-42502
漏洞归属组件：net
漏洞归属分支：默认分支
漏洞归属的版本：v0.23.0
漏洞修复版本: 0.55.0
CVSS分值：
 BaseScore： N/A None
 Vector： N/A

漏洞简述：
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

漏洞公开时间：2026-05-22 16:16:20
漏洞创建时间：2026-06-24 02:58:28
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2026-42502

[opensourceways-bot]

Welcome To opensourceways Community

Hey @opensourceways-bot , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands.

Contact Guide

If you have any questions, please contact the SIG: infratructure ,
and any of the maintainers: @GeorgeCao-hw, @TangJia025, @pkking, @zhongjun2 ,
and any of the committers: @123-prog, @Coopermasaaki, @LiYanghang00, @TangJia025, @ibfru, @yao-xiaobai .