PatchSiren

Libops CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Libops CVE published 2026-03-31

CVE-2026-34206

CVE-2026-34206 is a reflected cross-site scripting (XSS) vulnerability in Captcha Protect, a Traefik middleware. The vulnerability exists prior to version 1.12.2 and allows an attacker to inject arbitrary script into the challenge page. The challenge page accepted a client-supplied destination value and rendered it into HTML using Go's text/template, which does not perform contextual HTML escaping. This i [truncated]