CLEANSTART-2026-EO92718: In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found

Q: Which listed packages are affected?

The affected software listed for this advisory is cleanstart/kedacore-http-add-on and cleanstart/restic. No affected version ranges are provided.

Q: What does an attacker need to exploit this issue?

The CVSS vector indicates network access, low attack complexity, no required privileges, and required user interaction. The provided data does not specify the form of user interaction or the specific attack path.

Q: What is the expected security impact?

The issue is rated medium severity with a CVSS score of 6.1. It can have low confidentiality and integrity impact across a changed security scope, while no availability impact is indicated.

Published Nov 6, 2026

Updated

CVE-2026-97045 affects multiple packages. In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. See references for individual vulnerability details.

Affected Software

2 affected componentsFixes available

cleanstart/kedacore-http-add-on<0.16.0-r0

0.16.0-r0

cleanstart/restic<0.18.1-r13

0.18.1-r13

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/kedacore-http-add-on to a version that resolves this vulnerability.
Fixed in 0.16.0-r0
Upgrade
Upgrade cleanstart/restic to a version that resolves this vulnerability.
Fixed in 0.18.1-r13

Event History

Nov 6, 2026

Advisory Published

via OSV·12:36 AM

Data Sourced

via OSV·12:36 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-97045

Frequently Asked Questions

Which listed packages are affected?

The affected software listed for this advisory is cleanstart/kedacore-http-add-on and cleanstart/restic. No affected version ranges are provided.

What does an attacker need to exploit this issue?

The CVSS vector indicates network access, low attack complexity, no required privileges, and required user interaction. The provided data does not specify the form of user interaction or the specific attack path.

What is the expected security impact?

The issue is rated medium severity with a CVSS score of 6.1. It can have low confidentiality and integrity impact across a changed security scope, while no availability impact is indicated.

CLEANSTART-2026-EO92718: In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which listed packages are affected?

What does an attacker need to exploit this issue?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

Which listed packages are affected?

What does an attacker need to exploit this issue?

What is the expected security impact?