Reflected cross-site scripting (XSS) In golang-1.19
Description
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 13 | - | ||
 go | 1.26.9 | ||
 rpm rhel9 | - | - | |
rpm rhel8 | - | - | |
rpm rhel8 | - | - | |
rpm rhel10 | - | - | |
rpm rhel10 | - | - | |
rpm rhel10 | - | - | |
rpm rhel10 | - | - | |
rpm rhel9 | - | - |
1-10 of 51
10
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1. 2. 3.