Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

html/template — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in html/template, with AI-generated Chinese analysis, references, and POCs.

Vendor: Go standard library

CVE IDTitleCVSSSeverityPublished
CVE-2026-39823 Bypass of meta content URL escaping causes XSS in html/template 6.1AIMediumAI2026-05-07
CVE-2026-39826 Escaper bypass leads to XSS in html/template 5.0AIMediumAI2026-05-07
CVE-2026-32289 JsBraceDepth Context Tracking Bugs (XSS) in html/template 6.1AIMediumAI2026-04-08
CVE-2026-27142 URLs in meta content attribute actions are not escaped in html/template 6.1 -2026-03-06
CVE-2024-24785 Errors returned from JSON marshaling may break template escaping in html/template 5.3AIMediumAI2024-03-05
CVE-2023-39319 Improper handling of special tags within script contexts in html/template 6.1 -2023-09-08
CVE-2023-39318 Improper handling of HTML-like comments in script contexts in html/template 6.1 -2023-09-08
CVE-2023-24539 Improper sanitization of CSS values in html/template 7.2 -2023-05-11
CVE-2023-24540 Improper handling of JavaScript whitespace in html/template 9.8 -2023-05-11
CVE-2023-29400 Improper handling of empty HTML attributes in html/template 5.3 -2023-05-11
CVE-2023-24538 Backticks not treated as string delimiters in html/template 10.0 -2023-04-06

All 11 known CVE vulnerabilities affecting html/template with full Chinese analysis, references, and POCs where available.