The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. Additionally template actions within JS template literals did not properly track the brace depth, leading to incorrect escaping being applied. These issues could cause actions within JS template literals to be incorrectly or improperly escaped, leading to XSS vulnerabilities.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade rcloneUpgrade go | Apr 13, 2026 | Apr 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade oci-add-hooksUpgrade containerdUpgrade containerd-stressUpgrade docker-debuginfoUpgrade amazon-cloudwatch-agentUpgrade ecs-initUpgrade nerdctlUpgrade runc-debuginfoUpgrade golistUpgrade amazon-ecr-credential-helperUpgrade golang-sharedUpgrade golist-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade golang-docsUpgrade containerd-debuginfoUpgrade dockerUpgrade golang-miscUpgrade golang-binUpgrade nerdctl-debuginfoUpgrade golangUpgrade runcUpgrade golang-testsUpgrade golang-srcUpgrade amazon-ecr-credential-helper-debuginfoUpgrade soci-snapshotterUpgrade runfinch-finch | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-github-burntsushi-tomlUpgrade golang-sharedUpgrade rclone-debugsourceUpgrade runc-debugsourceUpgrade amazon-ecr-credential-helperUpgrade golang-srcUpgrade golang-docsUpgrade docker-debugsourceUpgrade credentials-fetcherUpgrade runcUpgrade runc-debuginfoUpgrade ecs-initUpgrade golist-debuginfoUpgrade amazon-cloudwatch-agentUpgrade golang-github-burntsushi-toml-debugsourceUpgrade golang-github-burntsushi-toml-develUpgrade docker-debuginfoUpgrade containerd-stress-debuginfoUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade containerd-stressUpgrade runfinch-finchUpgrade golang-github-burntsushi-toml-debuginfoUpgrade golangUpgrade golang-github-burntsushi-toml-test-develUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade nerdctlUpgrade oci-add-hooks-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade dockerUpgrade rclone-debuginfoUpgrade oci-add-hooksUpgrade golang-testsUpgrade golang-binUpgrade golang-github-cpuguy83-md2man-develUpgrade containerd-debugsourceUpgrade golist-debugsourceUpgrade containerdUpgrade soci-snapshotterUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade golang-github-burntsushi-toml-testUpgrade containerd-debuginfoUpgrade golang-miscUpgrade golang-github-cpuguy83-md2manUpgrade golistUpgrade rclone | May 4, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade golang-raceUpgrade golang-binUpgrade golang-docsUpgrade golang-testsNo solution existsUpgrade golangUpgrade go-toolsetUpgrade golang-miscUpgrade golang-src | Jul 17, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 8, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub