AZL-111526: CVE-2026-114538 affecting package debootstrap 1.0.128+nmu2-1

Q: Which component and versions are affected by this issue?

The vulnerability is reported in Drupal Bootstrap versions from 0.0.0 through 3.45.0. The provided data does not establish how the listed debootstrap package is related to Drupal Bootstrap.

Q: What type of impact does successful exploitation have?

Successful exploitation enables cross-site scripting (XSS) due to improper neutralization of input during web page generation. The provided information does not specify attacker prerequisites, affected configurations, or mitigations.

Published Oct 30, 2026

Updated

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Bootstrap allows Cross-Site Scripting (XSS). This issue affects Bootstrap versions: from 0.0.0 to 3.45.0.

Affected Software

1 affected component

azure-linux/debootstrap<=1.0.128+nmu2-1

Event History

Oct 30, 2026

Advisory Published

via OSV·04:18 AM

Data Sourced

via OSV·04:18 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-114538

Frequently Asked Questions

Which component and versions are affected by this issue?

The vulnerability is reported in Drupal Bootstrap versions from 0.0.0 through 3.45.0. The provided data does not establish how the listed debootstrap package is related to Drupal Bootstrap.

What type of impact does successful exploitation have?

Successful exploitation enables cross-site scripting (XSS) due to improper neutralization of input during web page generation. The provided information does not specify attacker prerequisites, affected configurations, or mitigations.

AZL-111526: CVE-2026-114538 affecting package debootstrap 1.0.128+nmu2-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which component and versions are affected by this issue?

What type of impact does successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Which component and versions are affected by this issue?

What type of impact does successful exploitation have?