CLEANSTART-2026-GM17380: In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found
Published Nov 3, 2026
·Updated
CVE-2026-97045 affects multiple packages. In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. See references for individual vulnerability details.
Affected Software
7 affected componentsFixes available
cleanstart/prometheus-mysqld-exporter<0.21.0-r1
0.21.0-r1
cleanstart/vault<2.1.2-r1
2.1.2-r1
cleanstart/rabbitmq-messaging-topology-operator<1.20.5-r1
1.20.5-r1
cleanstart/rabbitmq-cluster-operator<2.23.2-r1
2.23.2-r1
cleanstart/haproxy-ingress<0.15.6-r1
0.15.6-r1
cleanstart/haproxy-ingress<0.16.3-r1
0.16.3-r1
cleanstart/kyverno<1.18.2-r5
1.18.2-r5
Event History
Nov 3, 2026
Advisory Published
via OSV·12:39 AM
Data Sourced
via OSV·12:39 AM
DescriptionAffected Software