TI-2026-05281 CVE-2026-6019 · GHSA-2755-2mm4-rm5c
BaseCookie.js_output() does not neutralize embedded characters
Priority LOW 11
http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context.
RHSA-2026:32980
Red Hat Hardened Images RPMs Security Update
Released 2026-06-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Hardened Images python3.12-3.12.13-3.2.hum1@aarch64, python3.12-3.12.13-3.2.hum1@src, python3.12-3.12.13-3.2.hum1@x86_64 +12