Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirpUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade conmonUpgrade toolbox-testsUpgrade criu-develUpgrade netavarkUpgrade toolboxUpgrade skopeoUpgrade slirp4netnsUpgrade podman-pluginsUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade crunUpgrade podman-testsUpgrade libslirp-develUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podman-catatonitUpgrade podman-remoteUpgrade python3-criuUpgrade udicaUpgrade buildahUpgrade critUpgrade criu-libsUpgrade podmanUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade criuUpgrade aardvark-dns | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade containerdUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade containerd-stressUpgrade golang-miscUpgrade golang-binUpgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-docs | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 11, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade golang-miscUpgrade golangUpgrade golang-raceUpgrade golang-src | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade golang-docsUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debugsourceUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade udicaUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade golang-srcUpgrade slirp4netns-debuginfoUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade buildah-debuginfoUpgrade container-selinuxUpgrade toolbox-debuginfoUpgrade podman-remoteUpgrade criu-debugsourceUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade critUpgrade buildah-testsUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade golang-testsUpgrade libslirp-debuginfoUpgrade go-toolsetUpgrade aardvark-dnsUpgrade podmanUpgrade podman-debuginfoUpgrade runcUpgrade containers-commonUpgrade golang-binUpgrade delve-debuginfoUpgrade podman-catatonitUpgrade podman-plugins-debuginfoUpgrade buildahUpgrade runc-debuginfoUpgrade criu-develUpgrade golang-miscUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade python3-podmanUpgrade golang-raceUpgrade golangUpgrade crun-debuginfoUpgrade conmonUpgrade podman-pluginsUpgrade podman-dockerUpgrade criu-libsUpgrade slirp4netnsUpgrade netavarkUpgrade skopeo-debuginfoUpgrade libslirp-develUpgrade delve-debugsourceUpgrade delveUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debugsourceUpgrade toolboxUpgrade podman-gvproxyUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade criuUpgrade buildah-debugsourceUpgrade podman-testsUpgrade conmon-debugsourceUpgrade libslirpUpgrade crun | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade buildahUpgrade crunUpgrade cockpit-podmanUpgrade criuUpgrade runcUpgrade udicaUpgrade slirp4netnsUpgrade python3-podmanUpgrade buildah-testsUpgrade netavarkUpgrade podman-dockerUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade python3-criuUpgrade aardvark-dnsUpgrade critUpgrade libslirpUpgrade conmonUpgrade fuse-overlayfsUpgrade podman-testsUpgrade podman-remoteUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade podmanUpgrade container-selinuxUpgrade criu-develUpgrade skopeo-testsUpgrade libslirp-develUpgrade criu-libs | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade buildahUpgrade cri-toolsUpgrade openshift-clientsUpgrade skopeoUpgrade microshiftUpgrade podman | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade libslirp-develUpgrade conmonUpgrade crun-debuginfoUpgrade golangUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade runc-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade golang-srcUpgrade criu-debugsourceUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade golang-miscUpgrade conmon-debugsourceUpgrade criu-libsUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade aardvark-dnsUpgrade delve-debuginfoUpgrade buildah-testsUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade golang-raceUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade libslirpUpgrade netavarkUpgrade python3-podmanUpgrade buildahUpgrade skopeoUpgrade delve-debugsourceUpgrade podman-remoteUpgrade libslirp-debuginfoUpgrade delveNo solution existsUpgrade podman-gvproxy-debuginfoUpgrade runcUpgrade skopeo-testsUpgrade golang-binUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debuginfoUpgrade golang-docsUpgrade podman-debugsourceUpgrade criu-libs-debuginfoUpgrade criuUpgrade udicaUpgrade slirp4netns-debugsourceUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade cockpit-podmanUpgrade golang-testsUpgrade critUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade go-toolsetUpgrade conmon-debuginfoUpgrade crunUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade skopeo-debuginfoUpgrade criu-develUpgrade podman-plugins-debuginfoUpgrade podmanUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-testsUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade podman-debuginfoUpgrade podman-docker | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade podman-debuginfoUpgrade criu-develUpgrade podman-catatonitUpgrade critUpgrade conmon-debugsourceUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade podman-pluginsUpgrade conmonUpgrade containers-commonUpgrade criu-libs-debuginfoUpgrade podman-remoteUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade crunUpgrade buildah-debuginfoUpgrade slirp4netns-debugsourceUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade containernetworking-plugins-debuginfoUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade crun-debuginfoUpgrade libslirp-develUpgrade runc-debuginfoUpgrade conmon-debuginfoUpgrade buildahUpgrade python3-criuUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade criu-libsUpgrade libslirpUpgrade podman-testsUpgrade libslirp-debugsourceUpgrade aardvark-dnsUpgrade podman-plugins-debuginfoUpgrade buildah-tests | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19Upgrade go1.20-raceUpgrade go1.20-docUpgrade go1.19-raceUpgrade go1.19-docUpgrade go1.20 | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20-goUpgrade golang-1.20Upgrade golang-1.19-srcUpgrade golang-1.20-srcUpgrade golang-1.19Upgrade golang-1.19-go | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub