Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wpfx-qch4-q5j2

Опубликовано: 09 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.

EPSS

Процентиль: 21%
0.00289
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
18 дней назад

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.

CVSS3: 6.1
redhat
18 дней назад

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.

CVSS3: 6.1
nvd
18 дней назад

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.

CVSS3: 5.5
msrc
16 дней назад

Reset context tracking on consecutive template expressions in html/template

CVSS3: 6.1
debian
18 дней назад

When a JavaScript template literal contains consecutive expressions, t ...

EPSS

Процентиль: 21%
0.00289
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79