Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.
CVE-2026-56858 is a vulnerability classified as Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), affecting html/template (affected versions: < 1.25.13, 1.26.0-0 – < 1.26.6, and other affected versions). This vulnerability is rated Medium, with a CVSS score of 6.1. Current sources do not report this vulnerability as exploited.
Analyzing data...
Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
en
