VDB
Sign up
MEDIUM6.1

GO-2026-6600

Recognize yield as regexp preceder keyword in html/template

Quick fix

GO-2026-6600 — stdlib: upgrade to the fixed version with the command below.

go get stdlib@v1.26.9

Details

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped.

We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/stdlib
Introduced in: 0Fixed in: 1.26.9
Fixgo get stdlib@v1.26.9

References