CVE-2026-32289

[
  {
    "vendor": "Go standard library",
    "product": "html/template",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "html/template",
    "versions": [
      {
        "version": "0",
        "lessThan": "1.25.9",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "1.26.0-0",
        "lessThan": "1.26.2",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "programRoutines": [
      {
        "name": "context.String"
      },
      {
        "name": "context.mangle"
      },
      {
        "name": "escaper.escapeBranch"
      },
      {
        "name": "Error.Error"
      },
      {
        "name": "HTMLEscaper"
      },
      {
        "name": "JSEscape"
      },
      {
        "name": "JSEscapeString"
      },
      {
        "name": "JSEscaper"
      },
      {
        "name": "ParseFS"
      },
      {
        "name": "ParseFiles"
      },
      {
        "name": "ParseGlob"
      },
      {
        "name": "Template.AddParseTree"
      },
      {
        "name": "Template.Clone"
      },
      {
        "name": "Template.DefinedTemplates"
      },
      {
        "name": "Template.Execute"
      },
      {
        "name": "Template.ExecuteTemplate"
      },
      {
        "name": "Template.Funcs"
      },
      {
        "name": "Template.Parse"
      },
      {
        "name": "Template.ParseFS"
      },
      {
        "name": "Template.ParseFiles"
      },
      {
        "name": "Template.ParseGlob"
      },
      {
        "name": "URLQueryEscaper"
      }
    ],
    "defaultStatus": "unaffected"
  }
]