Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-26626.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-26626
Upstream
Published
2023-05-11T16:15:09Z
Modified
2026-04-01T05:08:24.350903Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
CVE-2023-24540 affecting package msft-golang for versions less than 1.20.11-1
Details

Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.

References

Affected packages

Azure Linux:2 / msft-golang

Package

Name
msft-golang
Purl
pkg:rpm/azure-linux/msft-golang

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-26626.json"