A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 8, 2026 · NIST NVD

   Detected

   A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped.

2. Oct 15, 2026 · NIST NVD

   Updated

   A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped.

Sources

• CVE.orgVulnerability recordCVE-2026-97030

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-97030

  A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped.

  nvd.nist.gov

References

• Reference · go.dev
• Reference · go.dev
• Reference · groups.google.com
• Reference · pkg.go.dev