Уязвимость языка программирования Go, связанная с неправильным кодированием или экранированием выходных данны, позволяющая нарушителю получить доступ на чтение и изменение данных

Уязвимость mimir

Уязвимость golang

If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the <script> block.

If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the <script> block.

If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the <script> block.

Escaper bypass leads to XSS in html/template

If a trusted template author were to write a <script> tag containing a ...

If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the <script> block.

Security update for go1.25

Security update for go1.26

Security update for go1.25-openssl

Security update for go1.26-openssl

Security update for go1.25-openssl

Security update for go1.26-openssl

Security update for go1.25

Security update for go1.26

ELSA-2026-22121: golang security update (IMPORTANT)

ELSA-2026-22120: golang security update (IMPORTANT)

ELSA-2026-22112: go-toolset:ol8 security update (IMPORTANT)