azure linux debootstrap vulnerabilities

Latest azure linux debootstrap CVEs

Newest publication first

1. CVE-2026-114538 Bootstrap - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-236

   Published 2026-10-30

   High·CVSS 7.1 EPSS 0.18%

   Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Bootstrap allows Cross-Site Scripting (XSS). This issue affects Bootstrap versions: from 0.0.0 to 3.45.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.