medium6.1
CVE-2026-94448
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression.
Impact
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.