Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-39826

Опубликовано: 07 мая 2026
Источник: nvd
CVSS3: 6.1
EPSS Низкий

Описание

If a trusted template author were to write a

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
Версия до 1.25.10 (исключая)
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
Версия от 1.26.0 (включая) до 1.26.3 (исключая)

EPSS

Процентиль: 30%
0.00371
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-116

Связанные уязвимости

CVSS3: 6.1
ubuntu
3 месяца назад

If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the <script> block.

CVSS3: 5.4
redhat
3 месяца назад

If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the <script> block.

msrc
3 месяца назад

Escaper bypass leads to XSS in html/template

CVSS3: 6.1
debian
3 месяца назад

If a trusted template author were to write a <script> tag containing a ...

CVSS3: 6.1
github
3 месяца назад

If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the <script> block.

EPSS

Процентиль: 30%
0.00371
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-116