If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.
{ "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.21-doc": "1.21.1-1~ubuntu20.04.3", "golang-1.21": "1.21.1-1~ubuntu20.04.3", "golang-1.21-src": "1.21.1-1~ubuntu20.04.3", "golang-1.21-go": "1.21.1-1~ubuntu20.04.3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.21-doc": "1.21.1-1~ubuntu22.04.3", "golang-1.21": "1.21.1-1~ubuntu22.04.3", "golang-1.21-src": "1.21.1-1~ubuntu22.04.3", "golang-1.21-go": "1.21.1-1~ubuntu22.04.3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.22": "1.22.2-2~22.04", "golang-1.22-doc": "1.22.2-2~22.04", "golang-1.22-go": "1.22.2-2~22.04", "golang-1.22-src": "1.22.2-2~22.04" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.21-doc": "1.21.9-1", "golang-1.21": "1.21.9-1", "golang-1.21-src": "1.21.9-1", "golang-1.21-go": "1.21.9-1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "golang-1.22": "1.22.1-1", "golang-1.22-doc": "1.22.1-1", "golang-1.22-go": "1.22.1-1", "golang-1.22-src": "1.22.1-1" } ] }