CVE-2026-76985: Unescaped Html Attribute Concatenationcve-2026-76985-unescaped-html-attribute-concatenation
HTML attribute key and value are appended to a markup buffer without escaping, which can lead to Cross-Site Scripting (XSS).
Explore
Rule Explorer
Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
- Public rules
- 4797
- Downloads
- 12M
- Verified
- 4797
- Authors
- 2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
All matching rules loaded.