Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-37428.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-37428
Upstream
Published
2023-05-11T16:15:09Z
Modified
2026-04-01T05:13:15.213121Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
CVE-2023-24540 affecting package golang for versions less than 1.21.6-1
Details

Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.

References

Affected packages

Azure Linux:2 / golang

Package

Name
golang
Purl
pkg:rpm/azure-linux/golang

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.18.0
Fixed
1.21.6-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-37428.json"