Lucene search
K

10 matches found

RedHat Linux
RedHat Linux
added 2026/02/26 2:36 p.m.4 views

golang: html/template: errors returned from MarshalJSON methods may break template escaping

A flaw was found in Go's html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into...

5.4CVSS5.7AI score0.00924EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2024/11/12 9:5 a.m.3 views

golang: html/template: errors returned from MarshalJSON methods may break template escaping

A flaw was found in Go's html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into...

5.4CVSS7.2AI score0.00924EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2024/07/29 12:19 a.m.3 views

golang: html/template: errors returned from MarshalJSON methods may break template escaping

A flaw was found in Go's html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into...

5.4CVSS7.2AI score0.00924EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2024/06/27 1:6 p.m.4 views

golang: html/template: errors returned from MarshalJSON methods may break template escaping

A flaw was found in Go's html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into...

5.4CVSS7.2AI score0.00924EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2024/06/20 12:39 p.m.1 views

golang: html/template: errors returned from MarshalJSON methods may break template escaping

A flaw was found in Go's html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into...

5.4CVSS7.2AI score0.00924EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2024/05/22 11:47 a.m.1 views

golang: html/template: errors returned from MarshalJSON methods may break template escaping

A flaw was found in Go's html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into...

5.4CVSS7.2AI score0.00924EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2024/04/30 1:33 p.m.2 views

golang: html/template: errors returned from MarshalJSON methods may break template escaping

A flaw was found in Go's html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into...

5.4CVSS7.2AI score0.00924EPSS
Exploits0References8
OSV
OSV
added 2024/03/05 11:15 p.m.1 views

DEBIAN-CVE-2024-24785

If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates...

5.4CVSS6.5AI score0.00924EPSS
Exploits0References1
OSV
OSV
added 2024/03/05 11:15 p.m.2 views

AZL-37457 CVE-2024-24785 affecting package golang for versions less than 1.21.6-1

If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates...

5.4CVSS6.7AI score0.00924EPSS
Exploits0References1
OSV
OSV
added 2024/03/05 11:15 p.m.4 views

AZL-79024 CVE-2024-24785 affecting package golang 1.25.7-1

If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates...

5.4CVSS7AI score0.00924EPSS
Exploits0References1
Rows per page
Query Builder