CLEANSTART-2026-AM47841: When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n
CVE-2026-78661 affects multiple packages. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n. See references for individual vulnerability details.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/lokito a version that resolves this vulnerability.Fixed in 3.5.12-r9 - Upgrade
Upgrade
cleanstart/yunikorn-k8shimto a version that resolves this vulnerability.Fixed in 1.8.0-r3 - Upgrade
Upgrade
cleanstart/yunikorn-k8shimto a version that resolves this vulnerability.Fixed in 1.9.0-r1 - Upgrade
Upgrade
cleanstart/prometheus-node-exporterto a version that resolves this vulnerability.Fixed in 1.11.1-r6 - Upgrade
Upgrade
cleanstart/prometheus-node-exporterto a version that resolves this vulnerability.Fixed in 1.9.1-r7
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates exploitation can be performed remotely over the network, requires no privileges, and does not require user interaction. Attack complexity is rated low.
What is the expected security impact?
The provided CVSS vector rates confidentiality impact as high. It does not indicate integrity or availability impact.