CVE-2023-24540 — Improper handling of JavaScript whitespace in html/template
Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u20…
Published: 2023-05-11 · CVSS: 9.8 · CVSS 3.1
Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7