Vulnerability GO-2026-6599
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
8 hours ago
October 08, 2026 at 10:31 PM UTC
Reset context tracking on consecutive template expressions in html/template
<1.26.9
<1.26.9
Summary
Reset context tracking on consecutive template expressions in html/template
Details
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression.
We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
8 hours ago
Recognize yield as regexp preceder keyword in html/template
<1.26.9 GO-2026-6600
<1.26.9 GO-2026-6600
Unknown
8 hours ago
HTTP/2 server memory exhaustion due to Trailer headers in net/http
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6603
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6603
Unknown
8 hours ago
Root.Mkdir(All) can follow junctions out of the root on Windows in os
<1.26.9 GO-2026-6604
<1.26.9 GO-2026-6604
Unknown
8 hours ago
HTTP/1 client connection desynchronization after CONNECT rejection in net/http
<1.26.9 GO-2026-6605
<1.26.9 GO-2026-6605
Unknown
8 hours ago
Reject malformed ECH outer extension references in crypto/tls
<1.26.9 GO-2026-6607
<1.26.9 GO-2026-6607
Impacted packages
Timeline
Published
8 hours ago
October 08, 2026 at 10:31 PM UTC
Last Modified
8 hours ago
October 08, 2026 at 11:00 PM UTC