Search: CVE-2026-94448

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.3%	CVE-2026-94448Go standard library html/template · Cross-site Scripting Medium6.1EPSS 0.3%2026-10-08CVE Database V5CVE-2026-94448 CVE-2026-94448 is a medium severity cross-site scripting (XSS) vulnerability in the Go standard library's html/template package. The issue arises when JavaScript template literals contain consecutive expressions, causing improper context tracking and failure to reset state correctly. This flaw can lead to insufficient escaping of regular expression literals within templates, potentially allowing injection of malicious scripts. EPSS 0.3%Vulnerability CWE-79 #microsoft-security-response-ce	CVE Database V5	2026-10-08

Page 1 of 1