GO-2024-2610 — Vulnetix

GO-2024-2610 PUBLISHED

Errors returned from JSON marshaling may break template escaping in html/template

Affected Products

Vendor	Product	Versions
Go	stdlib	0, 1.22.0-0, 0

Timeline

Mar 5, 2024 CVE Published
Feb 4, 2026 CVE Updated

References

https://go.dev/issue/65697 report
https://go.dev/cl/564196 patch
https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg url

Open in Interactive Console →

$ Console Community · 100/wk Open console ›