If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-testsUpgrade critUpgrade podman-catatonitUpgrade buildahUpgrade podmanUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade toolboxUpgrade podman-testsUpgrade cockpit-podmanUpgrade golang-binUpgrade skopeoUpgrade toolbox-testsUpgrade containernetworking-pluginsUpgrade golangUpgrade podman-remoteUpgrade podman-dockerUpgrade slirp4netnsUpgrade netavarkUpgrade podman-gvproxyUpgrade golang-docsUpgrade udicaUpgrade criuUpgrade aardvark-dnsUpgrade runcUpgrade libslirpUpgrade delveUpgrade skopeo-testsUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade go-toolsetUpgrade crunUpgrade golang-miscUpgrade python3-podmanUpgrade python3-criuUpgrade libslirp-develUpgrade container-selinuxUpgrade golang-srcUpgrade conmonUpgrade criu-develUpgrade podman-plugins | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-srcUpgrade golang-binUpgrade golang-miscUpgrade golangUpgrade golang-docsUpgrade golang-shared | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-sharedUpgrade golang-docsUpgrade golang-srcUpgrade golangUpgrade golang-testsUpgrade golang-misc | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade go122Upgrade go121 | Dec 10, 2025 | Mar 6, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | May 13, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jul 1, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Mar 18, 2025 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade podman-gvproxyUpgrade criu-libsUpgrade golangUpgrade criuUpgrade golang-miscUpgrade golang-srcUpgrade libslirp-develUpgrade buildah-testsUpgrade golang-testsUpgrade libslirpUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade skopeoUpgrade buildahUpgrade podmanUpgrade conmonUpgrade netavarkUpgrade containers-commonUpgrade podman-catatonitUpgrade python3-podmanUpgrade aardvark-dnsUpgrade container-selinuxUpgrade delveUpgrade python3-criuUpgrade golang-binUpgrade crunUpgrade udicaUpgrade cockpit-podmanUpgrade critUpgrade podman-testsUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade criu-develUpgrade golang-docsUpgrade runcUpgrade skopeo-testsUpgrade podman-dockerUpgrade go-toolsetUpgrade podman-plugins | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade ose-gcp-gcr-image-credential-providerUpgrade ose-azure-acr-image-credential-providerUpgrade openshiftUpgrade podmanUpgrade ignitionUpgrade ose-aws-ecr-image-credential-provider | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade crun-debugsourceUpgrade python3-podmanUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade buildah-debuginfoNo solution existsUpgrade golangUpgrade toolboxUpgrade golang-docsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfsUpgrade netavarkUpgrade skopeoUpgrade toolbox-testsUpgrade crunUpgrade podman-gvproxy-debuginfoUpgrade golang-testsUpgrade criuUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade critUpgrade buildahUpgrade udicaUpgrade rhc-worker-scriptUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoUpgrade criu-debuginfoUpgrade golang-miscUpgrade golang-binUpgrade podman-remote-debuginfoUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade runcUpgrade podman-catatonitUpgrade podmanUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade conmon-debuginfoUpgrade buildah-tests-debuginfoUpgrade containers-commonUpgrade criu-debugsourceUpgrade python3-criuUpgrade criu-libsUpgrade golang-srcUpgrade podman-dockerUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade libslirpUpgrade container-selinuxUpgrade delve-debuginfoUpgrade cockpit-podmanUpgrade podman-testsUpgrade delveUpgrade slirp4netns-debugsourceUpgrade podman-gvproxyUpgrade toolbox-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade criu-develUpgrade runc-debuginfoUpgrade libslirp-develUpgrade conmonUpgrade libslirp-debugsourceUpgrade aardvark-dnsUpgrade go-toolsetUpgrade buildah-testsUpgrade crun-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsource | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade criu-develUpgrade runc-debugsourceUpgrade podman-plugins-debuginfoUpgrade golang-binUpgrade podman-remote-debuginfoUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade crun-debugsourceUpgrade toolbox-debuginfoUpgrade go-toolsetUpgrade libslirp-debuginfoUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade crun-debuginfoUpgrade criu-libs-debuginfoUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade criu-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade podman-debuginfoUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade runcUpgrade podman-debugsourceUpgrade delveUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade aardvark-dnsUpgrade golangUpgrade slirp4netnsUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade conmonUpgrade delve-debuginfoUpgrade containers-commonUpgrade skopeoUpgrade criu-debuginfoUpgrade podman-testsUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade buildahUpgrade toolbox-testsUpgrade netavarkUpgrade libslirpUpgrade toolboxUpgrade podmanUpgrade buildah-tests | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.22-raceUpgrade go1.21Upgrade go1.21-openssl-docUpgrade go1.21-openssl-raceUpgrade go1.21-docUpgrade go1.22-opensslUpgrade go1.21-raceUpgrade go1.22-openssl-docUpgrade go1.22-openssl-raceUpgrade go1.22-docUpgrade go1.22Upgrade go1.21-openssl | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.17-goUpgrade golang-1.22-srcUpgrade golang-1.21-srcUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.21Upgrade golang-1.17Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.22-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.18-srcUpgrade golang-1.22Upgrade golang-1.21-goUpgrade golang-1.18 | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub