CVE-2023-39318

score

<0.1

cvss

6.1

epss

0.9%

published

2023-09-08

kev added

—

first seen

2026-10-21

The html/template package contains a vulnerability caused by improper handling of HTML-like comment tokens in <script> contexts, letting attackers perform XSS attacks, exploit requires attacker to inject malicious scripts.