Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Go standard library html/template 1.26.9, 1.27.2 Clear all filters
TI-2026-69839 CVE-2026-97030 · GHSA-22jx-p735-qcpm

Improper escaping of yield keyword in Go html/template

Priority LOW 27

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00289 Published 2026-10-08 Partial fix · 1.26.9, 1.27.2 CWE-79
TI-2026-69836 CVE-2026-94448 · GHSA-wpfx-qch4-q5j2

Incorrect context tracking in Go html/template template literals

Priority LOW 27

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00289 Published 2026-10-08 Partial fix · 1.26.9, 1.27.2 CWE-79