Description
CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the <content> attribute, the escaper would fail to similarly escape it, leading to XSS.
INFO
Published Date :
2026-05-07T19:41:19.524Z
Last Modified :
2026-05-08T14:05:55.152Z
Source :
Go
AFFECTED PRODUCTS
The following products are affected by CVE-2026-39823 vulnerability.
| Vendors | Products |
|---|---|
| Go Standard Library |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-39823.
