{"id":"AZL-111526","summary":"CVE-2026-114538 affecting package debootstrap 1.0.128+nmu2-1","details":"Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") vulnerability in Drupal Bootstrap allows Cross-Site Scripting (XSS). This issue affects Bootstrap versions: from 0.0.0 to 3.45.0.","modified":"2026-10-31T05:32:45Z","published":"2026-10-30T04:18:12Z","upstream":["CVE-2026-114538"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114538"}],"affected":[{"package":{"name":"debootstrap","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/debootstrap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.0.128+nmu2-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111526.json"}}],"schema_version":"1.9.2"}