CVE-2026-97045
Public on 2026-10-27
Modified on 2026-10-31
Description
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace (such as or fostered under ), causing a parser to resolve the subtree in a different foreign namespace upon re-parsing the rendered output. Continue walking the full ancestor chain and verify that every transition from a non-empty namespace occurs at an HTML integration point before emitting literal text.
Severity
See what this means
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Core | amazon-cloudwatch-agent | Pending Fix | ||
| Amazon Linux 2023 | amazon-cloudwatch-agent | Pending Fix | ||
| Amazon Linux 2027 Preview | amazon-cloudwatch-agent | Pending Fix | ||
| Amazon Linux 2 - Core | amazon-ssm-agent | Pending Fix | ||
| Amazon Linux 2023 | amazon-ssm-agent | Pending Fix | ||
| Amazon Linux 2027 Preview | amazon-ssm-agent | Pending Fix | ||
| Amazon Linux 2023 | buildah | Pending Fix | ||
| Amazon Linux 2027 Preview | buildah | Pending Fix | ||
| Amazon Linux 2 - Core | cni-plugins | Pending Fix | ||
| Amazon Linux 2023 | cni-plugins | Pending Fix | ||
| Amazon Linux 2027 Preview | cni-plugins | Pending Fix | ||
| Amazon Linux 2 - Aws-nitro-enclaves-cli Extra | containerd | Pending Fix | ||
| Amazon Linux 2 - Docker Extra | containerd | Pending Fix | ||
| Amazon Linux 2 - Ecs Extra | containerd | Pending Fix | ||
| Amazon Linux 2023 | containerd | Pending Fix | ||
| Amazon Linux 2027 Preview | containerd | Pending Fix | ||
| Amazon Linux 2023 | credentials-fetcher | Pending Fix | ||
| Amazon Linux 2027 Preview | credentials-fetcher | Pending Fix | ||
| Amazon Linux 2 - Core | cri-tools | Pending Fix | ||
| Amazon Linux 2 - Docker Extra | docker | Pending Fix | ||
| Amazon Linux 2023 | docker | Pending Fix | ||
| Amazon Linux 2027 Preview | docker | Not Affected | ||
| Amazon Linux 2 - Ecs Extra | ecs-init | Pending Fix | ||
| Amazon Linux 2023 | ecs-init | Pending Fix | ||
| Amazon Linux 2027 Preview | ecs-init | Pending Fix | ||
| Amazon Linux 2023 | git-lfs | Pending Fix | ||
| Amazon Linux 2027 Preview | git-lfs | Pending Fix | ||
| Amazon Linux 2 - Core | golang | Not Affected | ||
| Amazon Linux 2 - Golang1.11 Extra | golang | Not Affected | ||
| Amazon Linux 2 - Golang1.19 Extra | golang | Not Affected | ||
| Amazon Linux 2 - Golang1.9 Extra | golang | Not Affected | ||
| Amazon Linux 2023 | golang | Not Affected | ||
| Amazon Linux 2027 Preview | golang | Not Affected | ||
| Amazon Linux 2 - Core | nerdctl | Pending Fix | ||
| Amazon Linux 2023 | nerdctl | Pending Fix | ||
| Amazon Linux 2027 Preview | nerdctl | Pending Fix | ||
| Amazon Linux 2 - Core | rclone | Pending Fix | ||
| Amazon Linux 2023 | rclone | Pending Fix | ||
| Amazon Linux 2027 Preview | rclone | Pending Fix | ||
| Amazon Linux 2 - Docker Extra | runfinch-finch | Pending Fix | ||
| Amazon Linux 2023 | runfinch-finch | Pending Fix | ||
| Amazon Linux 2027 Preview | runfinch-finch | Pending Fix | ||
| Amazon Linux 2023 | skopeo | Pending Fix | ||
| Amazon Linux 2027 Preview | skopeo | Pending Fix | ||
| Amazon Linux 2 - Docker Extra | soci-snapshotter | Pending Fix | ||
| Amazon Linux 2023 | soci-snapshotter | Pending Fix | ||
| Amazon Linux 2027 Preview | soci-snapshotter | Pending Fix | ||
| Amazon Linux 2023 | yq | Pending Fix | ||
| Amazon Linux 2027 Preview | yq | Pending Fix |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |