CVE-2026-42502
MEDIUM
NVD
CVSS Score
6.1
Severity
MEDIUM
Published
May 22, 2026
Vendor
unknown
Description
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.