Veille CVE

Recherche « Go standard library html/template »

2 CVE

  1. CVE-2026-97030 6.1 Moyenne

    Go standard library html/template

    A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped.

  2. CVE-2026-94448 6.1 Moyenne

    Go standard library html/template

    When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.