Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criu-develUpgrade crunUpgrade podman-pluginsUpgrade containers-commonUpgrade skopeoUpgrade container-selinuxUpgrade toolboxUpgrade conmonUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade libslirp-develUpgrade udicaUpgrade libslirpUpgrade python3-criuUpgrade skopeo-testsUpgrade critUpgrade podman-testsUpgrade runcUpgrade podmanUpgrade podman-dockerUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade buildahUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade buildah-testsUpgrade criuUpgrade cockpit-podmanUpgrade netavarkUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade toolbox-testsUpgrade python3-podman | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerd-debuginfoUpgrade golang-testsUpgrade golang-sharedUpgrade containerdUpgrade golang-binUpgrade containerd-stressUpgrade golangUpgrade golang-miscUpgrade golang-docsUpgrade golang-srcUpgrade golang-race | Jun 6, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-docsUpgrade golang-raceUpgrade golang-sharedUpgrade golang-miscUpgrade golang-testsUpgrade golangUpgrade golang-src | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade crunUpgrade podman-plugins-debuginfoUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade container-selinuxUpgrade cockpit-podmanUpgrade podman-testsUpgrade go-toolsetUpgrade buildahUpgrade skopeo-debuginfoUpgrade python3-criuUpgrade podman-debugsourceUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-dockerUpgrade python3-podmanUpgrade slirp4netnsUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade libslirpUpgrade golang-raceUpgrade crun-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-gvproxyUpgrade conmonUpgrade crun-debugsourceUpgrade golangUpgrade criu-debuginfoUpgrade delveUpgrade skopeo-testsUpgrade containers-commonUpgrade criu-debugsourceUpgrade podman-catatonit-debuginfoUpgrade criuUpgrade podman-catatonitUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade libslirp-develUpgrade podmanUpgrade criu-develUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade delve-debuginfoUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade golang-binUpgrade udicaUpgrade netavarkUpgrade critUpgrade delve-debugsourceUpgrade golang-docsUpgrade golang-miscUpgrade skopeoUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade runcUpgrade toolboxUpgrade criu-libsUpgrade toolbox-debugsourceUpgrade podman-pluginsUpgrade golang-testsUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade golang-src | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade python3-podmanUpgrade libslirpUpgrade netavarkUpgrade buildahUpgrade conmonUpgrade criu-libsUpgrade libslirp-develUpgrade aardvark-dnsUpgrade buildah-testsUpgrade container-selinuxUpgrade podman-pluginsUpgrade slirp4netnsUpgrade critUpgrade skopeo-testsUpgrade podman-catatonitUpgrade udicaUpgrade podman-remoteUpgrade crunUpgrade podman-gvproxyUpgrade podman-dockerUpgrade criu-develUpgrade python3-criuUpgrade runcUpgrade criuUpgrade cockpit-podmanUpgrade podman-testsUpgrade podmanUpgrade containernetworking-plugins | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade skopeoUpgrade cri-toolsUpgrade podmanUpgrade microshift | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade netavarkUpgrade delve-debugsourceUpgrade python3-criuUpgrade podmanUpgrade podman-debuginfoUpgrade golang-docsUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade conmon-debugsourceUpgrade podman-catatonit-debuginfoUpgrade containernetworking-pluginsNo solution existsUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade fuse-overlayfsUpgrade crunUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade skopeoUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debugsourceUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonitUpgrade criu-debugsourceUpgrade criuUpgrade udicaUpgrade toolboxUpgrade libslirp-debuginfoUpgrade golang-testsUpgrade podman-remoteUpgrade podman-dockerUpgrade buildahUpgrade toolbox-testsUpgrade buildah-testsUpgrade golang-binUpgrade containernetworking-plugins-debugsourceUpgrade runc-debuginfoUpgrade containers-commonUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade aardvark-dnsUpgrade python3-podmanUpgrade crun-debuginfoUpgrade delve-debuginfoUpgrade golangUpgrade slirp4netns-debuginfoUpgrade crun-debugsourceUpgrade criu-libsUpgrade skopeo-testsUpgrade podman-testsUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-raceUpgrade podman-debugsourceUpgrade golang-miscUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade podman-plugins-debuginfoUpgrade go-toolsetUpgrade criu-develUpgrade buildah-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade delveUpgrade golang-srcUpgrade conmon-debuginfoUpgrade container-selinuxUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-develUpgrade podman-gvproxy | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade criuUpgrade buildahUpgrade netavarkUpgrade runcUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade libslirp-debuginfoUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxyUpgrade buildah-testsUpgrade podman-catatonitUpgrade python3-criuUpgrade podman-testsUpgrade libslirpUpgrade slirp4netnsUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade podman-remote-debuginfoUpgrade criu-libsUpgrade podman-remoteUpgrade critUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade libslirp-develUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-plugins-debuginfoUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debuginfoUpgrade containers-commonUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-pluginsUpgrade podmanUpgrade fuse-overlayfs-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.20-raceUpgrade go1.19-raceUpgrade go1.19-docUpgrade go1.20Upgrade go1.20-docUpgrade go1.19 | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20-srcUpgrade golang-1.20Upgrade golang-1.19Upgrade golang-1.20-goUpgrade golang-1.19-goUpgrade golang-1.19-src | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub