CVE-2024-24785

The golang language (specifically the html/template package) is vulnerable to a flaw where errors returned from MarshalJSON methods containing user-controlled data can break the contextual auto-escaping behavior. This allows for the injection of unexpected content into templates. Affected environ...