CLEANSTART-2026-NY38871: When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n
Published Nov 3, 2026
·Updated
CVE-2026-78661 affects multiple packages. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n. See references for individual vulnerability details.
Affected Software
7 affected componentsFixes available
cleanstart/prometheus-mysqld-exporter<0.21.0-r1
0.21.0-r1
cleanstart/vault<2.1.2-r1
2.1.2-r1
cleanstart/rabbitmq-messaging-topology-operator<1.20.5-r1
1.20.5-r1
cleanstart/rabbitmq-cluster-operator<2.23.2-r1
2.23.2-r1
cleanstart/haproxy-ingress<0.15.6-r1
0.15.6-r1
cleanstart/haproxy-ingress<0.16.3-r1
0.16.3-r1
cleanstart/kyverno<1.18.2-r5
1.18.2-r5
Event History
Nov 3, 2026
Advisory Published
via OSV·12:39 AM
Data Sourced
via OSV·12:39 AM
DescriptionAffected Software