Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

AngleSharp: HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass

cve-program · CVE-2026-54570

Published

AngleSharp

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "AngleSharp",
                    "product": "AngleSharp",
                    "versions": [
                        {
                            "version": "< 1.5.0",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

euvd · EUVD-2026-61128

Published

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Aug 18, 2026, 5:39:51 PM

dateUpdated: Aug 18, 2026, 7:27:44 PM

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

nvd · CVE-2026-54570

Published

NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.

Source analysis status: Deferred

Weakness classifications: CWE-80

Original publisher date fields

published: 2026-08-18T18:18:23.310

lastModified: 2026-09-18T20:09:01.757

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

osv · GHSA-pgww-w46g-26qg

Published

AngleSharp

NuGet

ECOSYSTEM · introduced 0 → fixed 1.5.0

239 versions listed as affected

0.10.0, 0.10.1, 0.11.0, 0.12.0, 0.12.1, 0.13.0, 0.13.0-alpha-733, 0.13.0-alpha-734, 0.13.0-alpha-735, 0.13.0-alpha-737, 0.13.0-alpha-739, 0.13.0-alpha-742, 0.13.0-alpha-743, 0.13.0-alpha-744, 0.13.0-alpha-745, 0.13.0-alpha-748, 0.13.0-alpha-754, 0.13.0-alpha-756, 0.13.0-alpha-758, 0.13.0-alpha-760, 0.13.0-alpha-763, 0.13.0-alpha-764, 0.13.0-alpha-766, 0.13.0-alpha-768, 0.13.0-alpha-771, 0.13.0-alpha-775, 0.13.0-alpha-782, 0.14.0, 0.14.0-alpha-783, 0.14.0-alpha-784, 0.14.0-alpha-787, 0.14.0-alpha-788, 0.14.0-alpha-789, 0.14.0-alpha-790, 0.14.0-alpha-793, 0.14.0-alpha-794, 0.14.0-alpha-796, 0.14.0-alpha-798, 0.14.0-alpha-801, 0.14.0-alpha-802, 0.14.0-alpha-803, 0.14.0-alpha-805, 0.14.0-alpha-809, 0.14.0-alpha-811, 0.14.0-alpha-813, 0.14.0-alpha-817, 0.14.0-alpha-818, 0.15.0, 0.15.0-alpha-14, 0.16.0, 0.16.0-alpha-72, 0.16.0-alpha-75, 0.16.0-alpha-76, 0.16.0-alpha-77, 0.16.0-alpha-78, 0.16.0-alpha-79, 0.16.0-alpha-80, 0.16.0-alpha-84, 0.16.0-alpha-85, 0.16.0-alpha-86, 0.16.1, 0.16.1-alpha-104, 0.16.1-alpha-106, 0.16.1-alpha-108, 0.16.1-alpha-110, 0.16.1-alpha-112, 0.16.1-alpha-114, 0.16.1-alpha-120, 0.16.1-alpha-125, 0.16.1-alpha-127, 0.16.1-alpha-133, 0.16.1-alpha-144, 0.16.1-alpha-145, 0.16.1-alpha-148, 0.16.1-alpha-152, 0.16.1-alpha-153, 0.16.1-alpha-155, 0.16.1-alpha-167, 0.16.1-alpha-168, 0.16.1-alpha-91, 0.16.1-alpha-96, 0.16.1-alpha-99, 0.17.0, 0.17.0-alpha-169, 0.17.0-alpha-170, 0.17.0-alpha-171, 0.17.0-alpha-172, 0.17.0-alpha-173, 0.17.0-alpha-174, 0.17.0-alpha-177, 0.17.1, 0.17.1-alpha-178, 0.17.1-alpha-179, 0.2.0, 0.2.1, 0.2.2, 0.2.3, 0.2.4, 0.2.5, 0.2.6, 0.2.7, 0.2.8, 0.2.9, 0.3.0, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.3.5, 0.3.6, 0.3.7, 0.4.0, 0.5.0, 0.5.1, 0.6.0, 0.6.1, 0.7.0, 0.8.0, 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.8.4.1, 0.8.5, 0.8.6, 0.8.7, 0.8.7.1, 0.8.8, 0.8.9, 0.9.0, 0.9.1, 0.9.10, 0.9.11, 0.9.2, 0.9.3, 0.9.4, 0.9.5, 0.9.6, 0.9.7, 0.9.8, 0.9.8.1, 0.9.9, 0.9.9.1, 0.9.9.2, 1.0.0, 1.0.0-alpha-1, 1.0.0-alpha-10, 1.0.0-alpha-12, 1.0.0-alpha-17, 1.0.0-alpha-20, 1.0.0-alpha-21, 1.0.0-alpha-229, 1.0.0-alpha-231, 1.0.0-alpha-25, 1.0.0-alpha-27, 1.0.0-alpha-31, 1.0.0-alpha-33, 1.0.0-alpha-36, 1.0.0-alpha-38, 1.0.0-alpha-4, 1.0.0-alpha-41, 1.0.0-alpha-47, 1.0.0-alpha-49, 1.0.0-alpha-59, 1.0.0-alpha-63, 1.0.0-alpha-64, 1.0.0-alpha-65, 1.0.0-alpha-68, 1.0.0-alpha-7, 1.0.0-alpha-70, 1.0.0-alpha-71, 1.0.0-alpha-819, 1.0.0-alpha-822, 1.0.0-alpha-825, 1.0.0-alpha-827, 1.0.0-alpha-842, 1.0.0-alpha-844, 1.0.0-ci-228, 1.0.1, 1.0.1-alpha-235, 1.0.1-alpha-241, 1.0.1-alpha-242, 1.0.1-alpha-243, 1.0.1-alpha-248, 1.0.2, 1.0.2-alpha-249, 1.0.2-alpha-250, 1.0.2-alpha-251, 1.0.2-alpha-255, 1.0.2-alpha-257, 1.0.2-alpha-258, 1.0.2-alpha-261, 1.0.2-alpha-273, 1.0.2-alpha-274, 1.0.2-alpha-275, 1.0.2-alpha-276, 1.0.2-alpha-277, 1.0.2-alpha-278, 1.0.2-alpha-281, 1.0.2-alpha-282, 1.0.2-alpha-283, 1.0.2-alpha-284, 1.0.3, 1.0.3-alpha-287, 1.0.4, 1.0.4-alpha-289, 1.0.4-alpha-290, 1.0.4-alpha-298, 1.0.4-alpha-300, 1.0.4-alpha-301, 1.0.4-alpha-307, 1.0.4-alpha-311, 1.0.4-alpha-314, 1.0.4-alpha-316, 1.0.5, 1.0.5-alpha-317, 1.0.6, 1.0.6-alpha-321, 1.0.6-alpha-325, 1.0.6-alpha-328, 1.0.6-alpha-330, 1.0.6-alpha-331, 1.0.6-alpha-339, 1.0.6-alpha-341, 1.0.7, 1.0.7-alpha-342, 1.1.0, 1.1.0-alpha-374, 1.1.0-alpha-375, 1.1.0-alpha-376, 1.1.0-alpha-377, 1.1.0-alpha-378, 1.1.0-alpha-379, 1.1.1, 1.1.2, 1.2.0, 1.3.0, 1.3.1, 1.4.0

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 05:08 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current