The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script" within JS literals in <script> contexts. This may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped. This could be leveraged to perform an XSS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade toolboxUpgrade podman-remoteUpgrade containers-commonUpgrade criu-develUpgrade skopeoUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade fuse-overlayfsUpgrade podmanUpgrade skopeo-testsUpgrade netavarkUpgrade podman-pluginsUpgrade podman-catatonitUpgrade criu-libsUpgrade critUpgrade runcUpgrade libslirp-develUpgrade podman-gvproxyUpgrade crunUpgrade container-selinuxUpgrade python3-podmanUpgrade cockpit-podmanUpgrade conmonUpgrade toolbox-testsUpgrade podman-testsUpgrade podman-dockerUpgrade aardvark-dnsUpgrade python3-criuUpgrade buildah-testsUpgrade slirp4netnsUpgrade buildahUpgrade udicaUpgrade libslirp | Dec 19, 2023 | Sep 8, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Sep 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golang-testsUpgrade golangUpgrade golang-misc | Jan 9, 2024 | Sep 8, 2023 |
| Amazon_linux | — | Upgrade golang | Jan 9, 2024 | Sep 8, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade golang-sharedUpgrade golang-srcUpgrade golang-miscUpgrade golang | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade libslirp-debuginfoUpgrade aardvark-dnsUpgrade python3-podmanUpgrade skopeoUpgrade udicaUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade crun-debugsourceUpgrade buildahUpgrade criuUpgrade toolbox-debugsourceUpgrade podman-debuginfoUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade critUpgrade criu-libs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debugsourceUpgrade toolboxUpgrade podman-dockerUpgrade podman-remoteUpgrade toolbox-testsUpgrade podman-catatonitUpgrade buildah-tests-debuginfoUpgrade buildah-debugsourceUpgrade netavarkUpgrade toolbox-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-pluginsUpgrade crun-debuginfoUpgrade cockpit-podmanUpgrade crunUpgrade skopeo-testsUpgrade libslirp-develUpgrade skopeo-debuginfoUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade libslirpUpgrade slirp4netns-debugsourceUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade runc-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libsUpgrade conmon-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade containers-commonUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmonUpgrade podman-testsUpgrade containernetworking-plugins-debuginfo | Dec 13, 2023 | Sep 8, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Sep 8, 2023 |
| Freebsd | — | Upgrade go120Upgrade go121 | Sep 8, 2023 | Sep 7, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Sep 8, 2023 |
| Oracle_linux | — | Upgrade containernetworking-pluginsUpgrade criuUpgrade python3-criuUpgrade netavarkUpgrade podman-remoteUpgrade buildah-testsUpgrade udicaUpgrade podman-catatonitUpgrade skopeoUpgrade podman-dockerUpgrade crunUpgrade podmanUpgrade buildahUpgrade runcUpgrade fuse-overlayfsUpgrade critUpgrade podman-gvproxyUpgrade container-selinuxUpgrade podman-pluginsUpgrade criu-develUpgrade libslirp-develUpgrade libslirpUpgrade containers-commonUpgrade criu-libsUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade podman-testsUpgrade python3-podmanUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade cockpit-podman | Dec 14, 2023 | Sep 6, 2023 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade microshiftUpgrade podmanUpgrade skopeoUpgrade containernetworking-pluginsUpgrade buildah | Nov 1, 2023 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade buildah-debuginfoUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade aardvark-dnsUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade criu-libsUpgrade cockpit-podmanUpgrade container-selinuxUpgrade podman-dockerUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade conmonUpgrade buildah-testsUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade crunUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade crun-debuginfoUpgrade buildahUpgrade python3-podmanUpgrade podman-gvproxyUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade buildah-debugsourceUpgrade libslirp-debuginfoUpgrade toolboxUpgrade containernetworking-pluginsNo solution existsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade critUpgrade netavarkUpgrade podman-remoteUpgrade toolbox-testsUpgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade conmon-debugsourceUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade fuse-overlayfsUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonitUpgrade skopeoUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade podman-remote-debuginfoUpgrade criu-debugsourceUpgrade runcUpgrade criu-develUpgrade criu-debuginfoUpgrade podmanUpgrade udicaUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade skopeo-debugsource | Dec 13, 2023 | Sep 8, 2023 |
| Rocky_linux | — | Upgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debugsourceUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade criu-develUpgrade toolboxUpgrade criuUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade containers-commonUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade skopeoUpgrade toolbox-debuginfoUpgrade crun-debugsourceUpgrade runcUpgrade python3-criuUpgrade buildah-testsUpgrade runc-debugsourceUpgrade critUpgrade libslirp-debuginfoUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade slirp4netns-debuginfoUpgrade criu-libs-debuginfoUpgrade aardvark-dnsUpgrade libslirp-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-testsUpgrade crun-debuginfoUpgrade buildahUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade containernetworking-pluginsUpgrade criu-debugsourceUpgrade buildah-debuginfo | May 8, 2025 | Sep 8, 2023 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.1.6 | Jul 30, 2026 | Sep 8, 2023 |
| Suse | — | Upgrade go1.21-raceUpgrade go1.21-opensslUpgrade go1.20-docUpgrade go1.21-docUpgrade go1.20Upgrade go1.21-openssl-docUpgrade go1.20-openssl-raceUpgrade go1.21Upgrade go1.20-raceUpgrade go1.20-openssl-docUpgrade go1.20-opensslUpgrade go1.21-openssl-race | Sep 21, 2023 | Sep 8, 2023 |
| Ubuntu | — | Upgrade golang-1.21-goUpgrade golang-1.21Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.17-srcUpgrade golang-1.18-goUpgrade golang-1.20-srcUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.20-goUpgrade golang-1.21-srcUpgrade golang-1.18Upgrade golang-1.17-goUpgrade golang-1.20Upgrade golang-1.17Upgrade golang-1.18-src (Ubuntu Pro) | Jan 12, 2024 | Sep 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub