github.com/golang/go is vulnerable to Arbitrary Code Execution. JavaScript templates do not consider backticks as string delimiters and do not escape them properly, which allows an attacker to bypass sanitization and execute arbitrary code on the system.

CPENameOperatorVersion
go:edgeeq1.18.5-r0
go:edgeeq1.16.2-r0
go:edgeeq1.17.8-r0
go:edgeeq1.17.6-r0
go:edgeeq1.20.1-r0
go:edgeeq1.16-r0
go:edgeeq1.13.10-r0
go:edgeeq1.13.8-r0
go:edgeeq1.18.1-r1
go:edgeeq1.17.4-r0

Name	Operator	Version
go:edge	eq	1.18.5-r0
go:edge	eq	1.16.2-r0
go:edge	eq	1.17.8-r0
go:edge	eq	1.17.6-r0
go:edge	eq	1.20.1-r0
go:edge	eq	1.16-r0
go:edge	eq	1.13.10-r0
go:edge	eq	1.13.8-r0
go:edge	eq	1.18.1-r1
go:edge	eq	1.17.4-r0