Multiple CVEs Identified in html/template Improper Handling Vulnerabilities

Five vulnerabilities have been published related to improper handling in the html/template package, affecting various aspects such as HTML comments, special tags, empty attributes, JavaScript whitespace, and CSS values. These vulnerabilities could potentially allow for exploitation in applications utilizing this package. The CVEs were published on February 18, 2026, with earlier known publication dates in 2023.