VDB
CVE-2026-97030
CVE-2026-97030
PUBLISHED
CVSS 6.1 MEDIUM
Reported by Go · Published October 8, 2026
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped.
Risk Scores
CVSS 3.1
6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Go standard library | html/template | 0, 1.27.0-0 |
| wolfi | wazero | * |
| chainguard | envoy-gateway-fips-1.9 | 0 |
| chainguard | terraform-provider-tls-fips | 0 |
| chainguard | cloud-provider-azure-fips-1.37 | 0 |
| chainguard | crossplane-provider-aws-s3control-fips | 0 |
| chainguard | contour-fips-1.31 | 0 |
| chainguard | opa-fips-envoy | 0 |
| chainguard | ory-keto | 0 |
| wolfi | esbuild | * |
| wolfi | gcsfuse | 0 |
| chainguard | acm-controller-fips | * |
| chainguard | crossplane-function-auto-ready | 0 |
| chainguard | longhorn-manager-fips-1.13 | 0 |
| chainguard | grafana-fips-12.1 | * |
| chainguard | opencost-fips | 0 |
| chainguard | mapotf-fips | * |
| chainguard | crossplane-provider-azure-policyinsights | 0 |
| chainguard | longhorn-instance-manager-1.12 | 0 |
| chainguard | crossplane-provider-aws-ssoadmin-fips | 0 |
…and 2398 more
Timeline
- Oct 8, 2026 CVE Published
- Oct 9, 2026 EPSS Score
- Oct 9, 2026 Coalition ESS Score
- Oct 14, 2026 EPSS Score
- Oct 15, 2026 CVE Updated
- Oct 16, 2026 EPSS Score
- Oct 21, 2026 EPSS Score
- Oct 25, 2026 EPSS Score
- Oct 26, 2026 Distribution Patch
- Oct 28, 2026 Distribution Patch
- Oct 28, 2026 Distribution Patch
- Oct 28, 2026 Security Advisory