Detections
Analytics
CVE-2026-94448
medium
Description
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.
References
https://pkg.go.dev/vuln/GO-2026-6599