Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirpUpgrade go-toolsetUpgrade container-selinuxUpgrade golang-testsUpgrade criu-develUpgrade crunUpgrade fuse-overlayfsUpgrade criuUpgrade python3-criuUpgrade udicaUpgrade toolboxUpgrade runcUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade buildah-testsUpgrade podman-dockerUpgrade podman-catatonitUpgrade podman-pluginsUpgrade python3-podmanUpgrade conmonUpgrade delveUpgrade golang-docsUpgrade golang-raceUpgrade critUpgrade slirp4netnsUpgrade buildahUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade libslirp-develUpgrade golang-srcUpgrade podmanUpgrade golang-binUpgrade containernetworking-pluginsUpgrade golangUpgrade skopeoUpgrade golang-miscUpgrade containers-commonUpgrade skopeo-testsUpgrade podman-remoteUpgrade aardvark-dnsUpgrade netavark | May 29, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade amazon-ssm-agentUpgrade amazon-ssm-agent-debuginfoUpgrade golang-binUpgrade containerd-stressUpgrade golang-sharedUpgrade golang-testsUpgrade containerd-debuginfoUpgrade golang-raceUpgrade containerdUpgrade golang-docsUpgrade golang-srcUpgrade golang-miscUpgrade docker-debuginfoUpgrade dockerUpgrade golang | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade amazon-ssm-agentUpgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade golang-docsUpgrade golang-testsUpgrade golang-sharedUpgrade golang-race | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade toolboxUpgrade fuse-overlayfsUpgrade udicaUpgrade delve-debugsourceUpgrade podman-remoteUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade golang-binUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade criuUpgrade runcUpgrade runc-debugsourceUpgrade toolbox-debuginfoUpgrade podman-testsUpgrade conmon-debugsourceUpgrade netavarkUpgrade podmanUpgrade critUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-testsUpgrade crunUpgrade skopeoUpgrade golang-docsUpgrade libslirp-debuginfoUpgrade python3-criuUpgrade golang-testsUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade buildahUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade buildah-debugsourceUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade criu-debugsourceUpgrade podman-pluginsUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade delve-debuginfoUpgrade criu-develUpgrade crun-debuginfoUpgrade containers-commonUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade criu-libsUpgrade slirp4netns-debuginfoUpgrade libslirpUpgrade conmonUpgrade golang-raceUpgrade crun-debugsourceUpgrade python3-podmanUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade libslirp-develUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade container-selinuxUpgrade podman-remote-debuginfoUpgrade golang-miscUpgrade delveUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade golangUpgrade golang-srcUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade aardvark-dns | May 29, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade skopeoUpgrade skopeo-testsUpgrade libslirpUpgrade podman-dockerUpgrade cockpit-podmanUpgrade criu-develUpgrade criuUpgrade udicaUpgrade slirp4netnsUpgrade conmonUpgrade podman-gvproxyUpgrade netavarkUpgrade delveUpgrade golang-raceUpgrade podman-testsUpgrade crunUpgrade podman-pluginsUpgrade python3-podmanUpgrade containers-commonUpgrade critUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade golangUpgrade go-toolsetUpgrade libslirp-develUpgrade golang-binUpgrade python3-criuUpgrade buildah-testsUpgrade podmanUpgrade golang-docsUpgrade runcUpgrade aardvark-dnsUpgrade criu-libsUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade golang-testsUpgrade golang-miscUpgrade fuse-overlayfsUpgrade buildahUpgrade podman-catatonitUpgrade golang-src | May 26, 2023 | Apr 20, 2023 |
| Rapid7 Scan Assistant | — | Upgrade to the latest version of Rapid7 InsightVM Scan Assistant | Jan 3, 2024 | May 11, 2023 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade skopeoUpgrade openshiftUpgrade podmanUpgrade buildah | Jun 8, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade containers-commonUpgrade criuUpgrade podman-debugsourceUpgrade netavarkUpgrade podman-remote-debuginfoUpgrade crunUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade runc-debuginfoUpgrade golang-docsUpgrade runcUpgrade criu-libs-debuginfoUpgrade golang-testsUpgrade crun-debugsourceUpgrade criu-libsUpgrade delve-debugsourceUpgrade golang-raceUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsourceUpgrade skopeoUpgrade golang-srcUpgrade delve-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade golang-binUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade podmanUpgrade containernetworking-plugins-debugsourceUpgrade delveUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade conmonUpgrade python3-podmanUpgrade podman-remoteUpgrade toolbox-debuginfoNo solution existsUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade skopeo-debugsourceUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade podman-gvproxy-debuginfoUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade conmon-debuginfoUpgrade golang-miscUpgrade udicaUpgrade go-toolsetUpgrade conmon-debugsourceUpgrade buildah-testsUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade container-selinuxUpgrade buildahUpgrade podman-testsUpgrade podman-dockerUpgrade golangUpgrade cockpit-podmanUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade python3-criuUpgrade crun-debuginfo | May 29, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade podman-remoteUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade buildah-debugsourceUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade crunUpgrade golang-binUpgrade delve-debugsourceUpgrade criu-debuginfoUpgrade golangUpgrade libslirp-debuginfoUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade runcUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade golang-raceUpgrade criuUpgrade podman-catatonitUpgrade fuse-overlayfs-debuginfoUpgrade critUpgrade criu-libs-debuginfoUpgrade podmanUpgrade conmon-debugsourceUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade delve-debuginfoUpgrade delveUpgrade criu-develUpgrade conmon-debuginfoUpgrade conmonUpgrade runc-debugsourceUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoUpgrade go-toolsetUpgrade libslirp-develUpgrade buildahUpgrade aardvark-dnsUpgrade libslirpUpgrade slirp4netns-debuginfoUpgrade buildah-testsUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debuginfoUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade criu-libsUpgrade libslirp-debugsourceUpgrade runc-debuginfo | Mar 5, 2024 | May 11, 2023 |
| Suse | — | Upgrade go1.20-raceUpgrade go1.20Upgrade go1.19-raceUpgrade go1.19-docUpgrade go1.19Upgrade go1.20-doc | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19-goUpgrade golang-1.20Upgrade golang-1.19-srcUpgrade golang-1.20-srcUpgrade golang-1.19Upgrade golang-1.20-go | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub