PT-2026-108319 · Go Standard Library+1 · Html/Template+1

CVE-2026-94448

·

Published

2026-10-08

·

Updated

2026-10-08

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)
Description A flaw exists where the context tracking state is not properly reset when a JavaScript template literal contains consecutive expressions. This failure to reset context variables can lead to subsequent regular expression literals being incorrectly recognized and escaped.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-94448
GO-2026-6599

Affected Products

Html/Template
Stdlib