Known Vulnerabilities for Html/template by Go Standard Library
Listed below are 10 of the newest known vulnerabilities associated with "Html/template" by "Go Standard Library".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110592 json | BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render_invoice_template() that allows authenticated... | Not Provided | 2026-10-14 | 2026-10-16 |
| CVE-2026-109558 json | EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders templat... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-106444 json | Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-106147 json | In Progress® Kendo® UI for jQuery releases starting with R1 2020 and prior to 2026.3.1015, the ListBox default item templat... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-104900 json | MISP contains a stored cross-site scripting (XSS) vulnerability in the index table rendering of the remote event preview. The... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104587 json | blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability. The application uses text/te... | Not Provided | 2026-10-13 | 2026-10-15 |
| CVE-2026-103889 json | The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to... | Not Provided | 2026-10-10 | 2026-10-11 |
| CVE-2026-102562 json | The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the publi... | Not Provided | 2026-10-13 | 2026-10-15 |
| CVE-2026-101111 json | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail page... | Not Provided | 2026-09-28 | 2026-09-30 |
| CVE-2026-100691 json | Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scripting vulnerability: the syntax highlighter does not esc... | Not Provided | 2026-09-26 | 2026-09-28 |