Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade libslirp-develUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade podman-testsUpgrade udicaUpgrade podman-pluginsUpgrade runcUpgrade podman-remoteUpgrade container-selinuxUpgrade crunUpgrade criu-develUpgrade buildahUpgrade libslirpUpgrade podman-catatonitUpgrade netavarkUpgrade podman-dockerUpgrade python3-podmanUpgrade conmonUpgrade containers-commonUpgrade fuse-overlayfsUpgrade skopeoUpgrade slirp4netnsUpgrade podmanUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade criuUpgrade buildah-testsUpgrade toolbox | Nov 16, 2023 | Aug 2, 2023 |
| Amazon Linux Ami 2 | — | Upgrade cri-toolsUpgrade containerd-stressUpgrade cri-tools-debuginfoUpgrade nerdctlUpgrade ecs-initUpgrade amazon-ssm-agent-debuginfoUpgrade nerdctl-debuginfoUpgrade containerdUpgrade containerd-debuginfoUpgrade amazon-ssm-agent | Nov 1, 2023 | Aug 2, 2023 |
| Amazon_linux_2023 | — | Upgrade amazon-ssm-agent-debuginfoUpgrade amazon-ssm-agentUpgrade amazon-ssm-agent-debugsourceUpgrade ecs-initUpgrade nerdctl | Feb 17, 2025 | Aug 2, 2023 |
| Centos_linux | — | Upgrade critUpgrade criu-libs-debuginfoUpgrade crunUpgrade runcUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade podman-debugsourceUpgrade podman-dockerUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade podman-testsUpgrade toolbox-testsUpgrade conmon-debuginfoUpgrade podman-gvproxyUpgrade toolbox-debugsourceUpgrade buildah-debugsourceUpgrade udicaUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade toolbox-debuginfoUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade container-selinuxUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-plugins-debuginfoUpgrade skopeoUpgrade toolboxUpgrade buildahUpgrade libslirpUpgrade podman-remote-debuginfoUpgrade buildah-tests-debuginfoUpgrade netavarkUpgrade conmon-debugsourceUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade criu-libsUpgrade criu-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade containers-commonUpgrade skopeo-debugsourceUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade conmonUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade runc-debugsourceUpgrade libslirp-devel | Nov 8, 2023 | Aug 2, 2023 |
| Debian | — | Upgrade golang-golang-x-net | May 15, 2025 | Aug 2, 2023 |
| Oracle_linux | — | Upgrade libslirpUpgrade critUpgrade podman-gvproxyUpgrade buildah-testsUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade podman-dockerUpgrade slirp4netnsUpgrade buildahUpgrade podman-remoteUpgrade podman-testsUpgrade runcUpgrade python3-criuUpgrade container-selinuxUpgrade crunUpgrade criuUpgrade python3-podmanUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade conmonUpgrade skopeoUpgrade podmanUpgrade libslirp-develUpgrade criu-develUpgrade containers-commonUpgrade podman-catatonitUpgrade netavarkUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade udicaUpgrade criu-libs | Nov 16, 2023 | Aug 2, 2023 |
| Redhat Openshift | — | Upgrade podmanUpgrade openshift-clients | Nov 1, 2023 | Aug 2, 2023 |
| Redhat_linux | — | Upgrade runcUpgrade skopeoUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade podman-debuginfoNo solution existsUpgrade skopeo-debugsourceUpgrade podmanUpgrade udicaUpgrade podman-remoteUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade crunUpgrade buildahUpgrade criuUpgrade podman-catatonitUpgrade netavarkUpgrade toolbox-debugsourceUpgrade podman-testsUpgrade critUpgrade toolbox-testsUpgrade toolboxUpgrade podman-dockerUpgrade fuse-overlayfs-debuginfoUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade criu-libs-debuginfoUpgrade libslirp-debuginfoUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade buildah-debugsourceUpgrade skopeo-testsUpgrade containers-commonUpgrade podman-debugsourceUpgrade python3-criuUpgrade slirp4netns-debugsourceUpgrade crun-debuginfoUpgrade conmonUpgrade python3-podmanUpgrade libslirpUpgrade criu-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debugsourceUpgrade podman-remote-debuginfoUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-debuginfoUpgrade container-selinuxUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade conmon-debuginfo | Nov 8, 2023 | Aug 2, 2023 |
| Rocky_linux | — | Upgrade buildah-debuginfoUpgrade runcUpgrade criu-libs-debuginfoUpgrade podman-testsUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade conmonUpgrade containernetworking-pluginsUpgrade podmanUpgrade buildah-tests-debuginfoUpgrade conmon-debugsourceUpgrade critUpgrade containernetworking-plugins-debugsourceUpgrade aardvark-dnsUpgrade podman-remoteUpgrade criu-debuginfoUpgrade buildahUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade netavarkUpgrade slirp4netns-debuginfoUpgrade podman-gvproxyUpgrade podman-plugins-debuginfoUpgrade criu-libsUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade conmon-debuginfoUpgrade libslirp-debugsourceUpgrade criu-develUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade libslirp-debuginfoUpgrade libslirpUpgrade crun-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade runc-debuginfoUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade crun-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-develUpgrade crun | Dec 1, 2025 | Nov 28, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.1.6 | Jul 30, 2026 | Aug 2, 2023 |
| Ubuntu | — | Upgrade golang-golang-x-net-dev (Ubuntu Pro) | Mar 13, 2026 | Aug 2, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub