Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.10.4-2ubuntu1~16.04.2", "binary_name": "golang-1.10" }, { "binary_version": "1.10.4-2ubuntu1~16.04.2", "binary_name": "golang-1.10-doc" }, { "binary_version": "1.10.4-2ubuntu1~16.04.2", "binary_name": "golang-1.10-go" }, { "binary_version": "1.10.4-2ubuntu1~16.04.2", "binary_name": "golang-1.10-go-dbgsym" }, { "binary_version": "1.10.4-2ubuntu1~16.04.2", "binary_name": "golang-1.10-src" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.10.4-2ubuntu1~18.04.2", "binary_name": "golang-1.10" }, { "binary_version": "1.10.4-2ubuntu1~18.04.2", "binary_name": "golang-1.10-doc" }, { "binary_version": "1.10.4-2ubuntu1~18.04.2", "binary_name": "golang-1.10-go" }, { "binary_version": "1.10.4-2ubuntu1~18.04.2", "binary_name": "golang-1.10-go-dbgsym" }, { "binary_version": "1.10.4-2ubuntu1~18.04.2", "binary_name": "golang-1.10-src" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.14.3-2ubuntu2~20.04.2", "binary_name": "golang-1.14" }, { "binary_version": "1.14.3-2ubuntu2~20.04.2", "binary_name": "golang-1.14-doc" }, { "binary_version": "1.14.3-2ubuntu2~20.04.2", "binary_name": "golang-1.14-go" }, { "binary_version": "1.14.3-2ubuntu2~20.04.2", "binary_name": "golang-1.14-go-dbgsym" }, { "binary_version": "1.14.3-2ubuntu2~20.04.2", "binary_name": "golang-1.14-src" } ] }