UNKNOWN Go

Improper handling of HTML-like comments in script contexts in html/template

GO-2023-2041 · BIT-golang-2023-39318 · CVE-2023-39318

Published · Modified

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Description

The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "#!" comment tokens, in