Kurz gesagt
- CVE-2026-94448 ist eine Schwachstelle (MITTEL (CVSS 6.1)) in stdlib.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.29%, höher als bei 21.5% aller Schwachstellen.
- Abhilfe: auf 1.27.2, 1.26.9 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| stdlib Go | ≥ 1.27.0-0, < 1.27.2< 1.26.9
| 1.27.21.26.9
|
Description
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression.
We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.
NVD description
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free