Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Sep 7, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golangUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade golang-miscUpgrade golang-src | Sep 1, 2026 | Aug 13, 2026 |
| Redhat Openshift | — | Upgrade ose-aws-ecr-image-credential-providerUpgrade cri-oUpgrade openshift-clientsUpgrade cri-toolsUpgrade ose-azure-acr-image-credential-providerUpgrade openshift | Sep 16, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade go-toolsetUpgrade python3.12-django-ansible-base+resource_registryUpgrade automation-gateway-proxy-debugsourceNo solution existsUpgrade grafana-pcp-debuginfoUpgrade osbuild-composer-debuginfoUpgrade automation-gatewayUpgrade ignition-edgeUpgrade conmon-debugsourceUpgrade criuUpgrade buildah-tests-debuginfoUpgrade grafana-pcp-debugsourceUpgrade osbuild-composer-coreUpgrade libslirpUpgrade automation-eda-controller-worker-servicesUpgrade golang-srcUpgrade grafana-debuginfoUpgrade automation-gateway-proxyUpgrade automation-gateway-proxy-serverUpgrade opentelemetry-collectorUpgrade podman-dockerUpgrade podman-tests-debuginfoUpgrade automation-controller-venv-towerUpgrade automation-hubUpgrade netavarkUpgrade python3-criuUpgrade crun-debuginfoUpgrade criu-debuginfoUpgrade podman-testsUpgrade python3.12-django-ansible-base+rest_filtersUpgrade python3.12-sqlparseUpgrade buildah-testsUpgrade runcUpgrade golang-miscUpgrade image-builder-debugsourceUpgrade udicaUpgrade automation-eda-controller-base-servicesUpgrade ignitionUpgrade python3.12-galaxy-ngUpgrade skopeo-debuginfoUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade toolbox-debugsourceUpgrade python3.12-django-ansible-base+jwt_consumerUpgrade aardvark-dnsUpgrade automation-controllerUpgrade cockpit-podmanUpgrade ignition-debugsourceUpgrade receptorctlUpgrade automation-controller-cliUpgrade aap-metrics-utilityUpgrade fuse-overlayfsUpgrade buildahUpgrade toolbox-testsUpgrade podman-catatonitUpgrade automation-controller-uiUpgrade conmon-debuginfoUpgrade buildah-debuginfoUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade automation-controller-serverUpgrade skopeo-debugsourceUpgrade criu-debugsourceUpgrade golangUpgrade runc-debugsourceUpgrade critUpgrade python3.12-django-ansible-base+activitystreamUpgrade python3.12-django-ansible-base+channel_authUpgrade golang-binUpgrade python3.12-django-ansible-base+rbacUpgrade ignition-validateUpgrade toolbox-debuginfoUpgrade grafanaUpgrade slirp4netns-debuginfoUpgrade automation-eda-controller-event-stream-servicesUpgrade grafana-pcpUpgrade flightctl-agentUpgrade osbuild-composer-core-debuginfoUpgrade flightctl-observabilityUpgrade fuse-overlayfs-debugsourceUpgrade automation-platform-uiUpgrade python3.12-django-ansible-base+feature_flagsUpgrade rhc-develUpgrade containernetworking-plugins-debuginfoUpgrade python3.12-django-ansible-base+oauth2_providerUpgrade python3-sqlparseUpgrade golang-raceUpgrade python3.12-django-ansible-base+authenticationUpgrade criu-libsUpgrade skopeoUpgrade automation-gateway-proxy-server-debuginfoUpgrade image-builder-debuginfoUpgrade image-builderUpgrade grafana-selinuxUpgrade grafana-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade podman-pluginsUpgrade runc-debuginfoUpgrade delve-debugsourceUpgrade slirp4netns-debugsourceUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade receptorUpgrade fuse-overlayfs-debuginfoUpgrade golang-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remoteUpgrade automation-eda-controller-baseUpgrade python3.12-django-ansible-base+redis_clientUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade ignition-grubUpgrade receptor-debugsourceUpgrade osbuild-composer-workerUpgrade podman-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade python3.12-django-ansible-baseUpgrade rhc-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade flightctl-selinuxUpgrade criu-develUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade automation-gateway-configUpgrade toolboxUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade ignition-validate-debuginfoUpgrade ignition-debuginfoUpgrade podman-plugins-debuginfoUpgrade flightctl-cliUpgrade delveUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade automation-eda-controllerUpgrade podman-remote-debuginfoUpgrade python3-podmanUpgrade flightctl-servicesUpgrade golang-docsUpgrade libslirp-debugsourceUpgrade automation-gateway-serverUpgrade skopeo-testsUpgrade rhc-debuginfoUpgrade delve-debuginfoUpgrade container-selinuxUpgrade python3.12-gitpythonUpgrade podmanUpgrade osbuild-composer-debugsourceUpgrade libslirp-develUpgrade receptor-debuginfoUpgrade rhcUpgrade buildah-debugsourceUpgrade osbuild-composerUpgrade python3.12-django-ansible-base+api_documentationUpgrade osbuild-composer-tests-debuginfo | Aug 17, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade opentelemetry-collectorUpgrade buildah-debugsourceUpgrade criu-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade image-builderUpgrade podman-debuginfoUpgrade image-builder-debuginfoUpgrade osbuild-composer-workerUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade skopeoUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade grafana-pcpUpgrade toolbox-debugsourceUpgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade grafana-debugsourceUpgrade runcUpgrade libslirp-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade crun-debugsourceUpgrade critUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade aardvark-dnsUpgrade osbuild-composerUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade podman-catatonit-debuginfoUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade delve-debugsourceUpgrade golangUpgrade criu-libsUpgrade podman-debugsourceUpgrade golang-binUpgrade delve-debuginfoUpgrade podmanUpgrade grafana-debuginfoUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade criuUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonitUpgrade containers-commonUpgrade grafana-selinuxUpgrade podman-plugins-debuginfoUpgrade golang-raceUpgrade skopeo-debuginfoUpgrade crunUpgrade crun-debuginfoUpgrade buildah-testsUpgrade podman-pluginsUpgrade grafanaUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delveUpgrade image-builder-debugsourceUpgrade toolbox-testsUpgrade skopeo-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade osbuild-composer-coreUpgrade grafana-pcp-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade libslirpUpgrade slirp4netnsUpgrade osbuild-composer-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-gvproxyUpgrade osbuild-composer-debugsourceUpgrade netavarkUpgrade podman-testsUpgrade grafana-pcp-debuginfoUpgrade go-toolsetUpgrade conmonUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade conmon-debuginfoUpgrade toolbox | Aug 28, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub