UNKNOWN Go

Escaper bypass leads to XSS in html/template

GO-2026-4980 · BIT-golang-2026-39826 · CVE-2026-39826

Published · Modified

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Description

If a trusted template author were to write a