MEDIUM6.1
GO-2026-6599
Reset context tracking on consecutive template expressions in html/template
Quick fix
GO-2026-6599 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.26.9Details
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression.
We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.
Are you affected?
Enter the version of the package you're using.