HT
Product
html/template
7
CVEs
0
On KEV
6.1
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 7Low 0
Watch
Add html/template to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-97030 | 6.1 | Oct 8 | Recognize yield as regexp preceder keyword in html/template Affected: before 1.26.9; 1.27.0-0 before 1.27.2 |
| CVE-2026-94448 | 6.1 | Oct 8 | Reset context tracking on consecutive template expressions in html/template Affected: before 1.26.9; 1.27.0-0 before 1.27.2 |
| CVE-2026-56858 | 6.1 | Aug 13 | Fix Javascript regexp context tracking in html/template Affected: before 1.25.13; 1.26.0-0 before 1.26.6; 1.27.0-0 before 1.27.0-rc.3 |
| CVE-2026-39823 | 6.1 | May 7 | Bypass of meta content URL escaping causes XSS in html/template Affected: before 1.25.10; 1.26.0-0 before 1.26.3 |
| CVE-2026-39826 | 6.1 | May 7 | Escaper bypass leads to XSS in html/template Affected: before 1.25.10; 1.26.0-0 before 1.26.3 |
| CVE-2026-32289 | 6.1 | Apr 8 | JsBraceDepth Context Tracking Bugs (XSS) in html/template Affected: before 1.25.9; 1.26.0-0 before 1.26.2 |
| CVE-2026-27142 | 6.1 | Mar 6 | URLs in meta content attribute actions are not escaped in html/template Affected: before 1.25.8; 1.26.0-0 before 1.26.1 |
Showing 7