Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-94448

Опубликовано: 08 окт. 2026
Источник: nvd
CVSS3: 6.1
EPSS Низкий

Описание

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.

EPSS

Процентиль: 21%
0.00289
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
18 дней назад

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.

CVSS3: 6.1
redhat
18 дней назад

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.

CVSS3: 5.5
msrc
16 дней назад

Reset context tracking on consecutive template expressions in html/template

CVSS3: 6.1
debian
18 дней назад

When a JavaScript template literal contains consecutive expressions, t ...

CVSS3: 6.1
github
18 дней назад

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.

EPSS

Процентиль: 21%
0.00289
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79