CVE-2026-39826

🗓️ 07 May 2026 20:16:00Reported by ubuntu.comType

ubuntucve

ubuntucve🔗 ubuntu.com👁 11 Views

Trusted template authors using a script tag with an empty or whitespace type escapes data in script.

Reporter	Title	Published	Views	Family All 1354
OSV	MINI-JQC5-V25J-FXM5	11 May 202605:49	–	osv
OSV	MINI-JR57-WF7C-VV66	11 May 202606:03	–	osv
OSV	MINI-JV4C-R4FJ-CH6X	11 May 202614:05	–	osv
OSV	MINI-JVM6-83RX-JXQP	11 May 202614:05	–	osv
OSV	MINI-JW2X-GJFM-J6GF	11 May 202623:20	–	osv
OSV	MINI-JWPR-MGXC-J7FV	11 May 202606:00	–	osv
OSV	MINI-JXJW-2XW8-CW9P	11 May 202619:33	–	osv
OSV	MINI-JXXC-C632-52HH	11 May 202606:03	–	osv
OSV	MINI-JXXW-8829-9PPW	11 May 202619:33	–	osv
OSV	MINI-M22H-H6RW-CHR5	11 May 202619:16	–	osv

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	22.04	all	golang-1.23	0	golang-1.23_0_all.deb
Ubuntu	24.04	all	golang-1.23	0	golang-1.23_0_all.deb
Ubuntu	26.04	all	golang-1.23	0	golang-1.23_0_all.deb
Ubuntu	22.04	all	golang-1.24	0	golang-1.24_0_all.deb
Ubuntu	24.04	all	golang-1.24	0	golang-1.24_0_all.deb
Ubuntu	26.04	all	golang-1.24	0	golang-1.24_0_all.deb
Ubuntu	26.04	all	golang-1.25	0	golang-1.25_0_all.deb
Ubuntu	14.04	all	golang-1.10	0	golang-1.10_0_all.deb
Ubuntu	16.04	all	golang-1.10	0	golang-1.10_0_all.deb
Ubuntu	18.04	all	golang-1.10	0	golang-1.10_0_all.deb

Source	Link
cve	www.cve.org/CVERecord
go-review	www.go-review.googlesource.com/c/go/+/771180
github	www.github.com/golang/go/issues/78981
groups	www.groups.google.com/g/golang-announce/c/qcCIEXso47M
go	www.go.dev/cl/771180
go	www.go.dev/issue/78981
pkg	www.pkg.go.dev/vuln/GO-2026-4980

14 May 2026 07:31Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.1

EPSS0.00371

SSVC

trusted template authors script tag empty type attribute whitespace type attribute data escaping