CVE-2024-24785

A vulnerability exists in the golang package (specifically within the html/template package) where errors returned from MarshalJSON methods containing user-controlled data can break contextual auto-escaping. This allows attackers to inject unexpected content into templates. Impacted systems inclu...