Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.
{ "binaries": [ { "binary_version": "1.10.4-2ubuntu1~16.04.2", "binary_name": "golang-1.10" }, { "binary_version": "1.10.4-2ubuntu1~16.04.2", "binary_name": "golang-1.10-go" }, { "binary_version": "1.10.4-2ubuntu1~16.04.2", "binary_name": "golang-1.10-src" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "1.10.4-2ubuntu1~18.04.2", "binary_name": "golang-1.10" }, { "binary_version": "1.10.4-2ubuntu1~18.04.2", "binary_name": "golang-1.10-go" }, { "binary_version": "1.10.4-2ubuntu1~18.04.2", "binary_name": "golang-1.10-src" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "1.14.3-2ubuntu2~20.04.2", "binary_name": "golang-1.14" }, { "binary_version": "1.14.3-2ubuntu2~20.04.2", "binary_name": "golang-1.14-go" }, { "binary_version": "1.14.3-2ubuntu2~20.04.2", "binary_name": "golang-1.14-src" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "1.8.3-2ubuntu1.18.04.1", "binary_name": "golang-1.8" }, { "binary_version": "1.8.3-2ubuntu1.18.04.1", "binary_name": "golang-1.8-go" }, { "binary_version": "1.8.3-2ubuntu1.18.04.1", "binary_name": "golang-1.8-go-shared-dev" }, { "binary_version": "1.8.3-2ubuntu1.18.04.1", "binary_name": "golang-1.8-src" }, { "binary_version": "1.8.3-2ubuntu1.18.04.1", "binary_name": "libgolang-1.8-std1" } ] }