https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T20:05:27.955191+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-39823 CVE-2026-39823 — Bypass of meta content URL escaping causes XSS in html/template 2026-09-29T20:05:28.578443+00:00

Affected: Go standard library html/template

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS.