Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirpUpgrade udicaUpgrade crunUpgrade python3-criuUpgrade libslirp-develUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade podmanUpgrade skopeoUpgrade critUpgrade toolboxUpgrade podman-testsUpgrade criu-libsUpgrade conmonUpgrade runcUpgrade containers-commonUpgrade podman-catatonitUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade slirp4netnsUpgrade criuUpgrade buildahUpgrade podman-remoteUpgrade netavarkUpgrade buildah-testsUpgrade cockpit-podmanUpgrade podman-gvproxy | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerd-debuginfoUpgrade golang-testsUpgrade golang-srcUpgrade containerdUpgrade golang-docsUpgrade golang-binUpgrade golang-sharedUpgrade golang-miscUpgrade containerd-stressUpgrade golangUpgrade golang-race | Jun 6, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golang-race | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade conmon-debugsourceUpgrade golang-srcUpgrade udicaUpgrade critUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-testsUpgrade golang-binUpgrade golang-docsUpgrade netavarkUpgrade golang-miscUpgrade podman-debuginfoUpgrade criuUpgrade criu-debugsourceUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade golang-testsUpgrade toolboxUpgrade podman-pluginsUpgrade delve-debugsourceUpgrade skopeoUpgrade criu-libsUpgrade toolbox-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade libslirp-develUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-catatonitUpgrade toolbox-debuginfoUpgrade runc-debuginfoUpgrade criu-libs-debuginfoUpgrade podmanUpgrade golangUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade buildah-debugsourceUpgrade delve-debuginfoUpgrade delveUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debuginfoUpgrade fuse-overlayfsUpgrade slirp4netns-debuginfoUpgrade cockpit-podmanUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade python3-podmanUpgrade containernetworking-plugins-debugsourceUpgrade podman-testsUpgrade container-selinuxUpgrade skopeo-debuginfoUpgrade conmonUpgrade podman-gvproxyUpgrade libslirpUpgrade runc-debugsourceUpgrade podman-dockerUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-raceUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade go-toolsetUpgrade buildahUpgrade skopeo-debugsourceUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade podman-plugins-debuginfoUpgrade crunUpgrade conmon-debuginfoUpgrade python3-criuUpgrade podman-debugsource | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade libslirp-develUpgrade skopeoUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade criu-libsUpgrade libslirpUpgrade python3-podmanUpgrade aardvark-dnsUpgrade buildah-testsUpgrade conmonUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade crunUpgrade podman-dockerUpgrade container-selinuxUpgrade cockpit-podmanUpgrade podman-testsUpgrade podman-pluginsUpgrade podmanUpgrade skopeo-testsUpgrade critUpgrade podman-remoteUpgrade slirp4netnsUpgrade udicaUpgrade criu-develUpgrade podman-gvproxyUpgrade python3-criuUpgrade runcUpgrade podman-catatonitUpgrade criu | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade microshiftUpgrade podmanUpgrade skopeoUpgrade cri-toolsUpgrade openshift-clients | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade go-toolsetUpgrade slirp4netns-debugsourceUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-raceUpgrade libslirpUpgrade libslirp-develUpgrade delveUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade podman-debugsourceUpgrade podman-testsUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxyUpgrade conmonUpgrade criu-develUpgrade container-selinuxUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade golang-miscUpgrade criu-debuginfoUpgrade criu-libsUpgrade podman-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debuginfoUpgrade crun-debugsourceUpgrade delve-debuginfoUpgrade slirp4netns-debuginfoUpgrade aardvark-dnsUpgrade containers-commonUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade golangUpgrade podman-remote-debuginfoUpgrade python3-podmanUpgrade python3-criuUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade criu-libs-debuginfoUpgrade golang-testsUpgrade golang-docsUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debugsourceUpgrade conmon-debugsourceUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade fuse-overlayfsUpgrade netavarkUpgrade criuUpgrade criu-debugsourceUpgrade buildah-testsUpgrade golang-binUpgrade skopeoUpgrade buildahUpgrade buildah-debugsourceUpgrade libslirp-debuginfoUpgrade udicaUpgrade toolbox-testsUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade podmanUpgrade containernetworking-pluginsNo solution existsUpgrade podman-catatonitUpgrade skopeo-debugsourceUpgrade runc | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade criu-libsUpgrade crun-debugsourceUpgrade critUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade slirp4netns-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade containers-commonUpgrade buildahUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade criuUpgrade criu-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-catatonitUpgrade python3-criuUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade podman-gvproxyUpgrade fuse-overlayfs-debugsourceUpgrade runcUpgrade netavarkUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade podman-testsUpgrade libslirpUpgrade libslirp-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.20-raceUpgrade go1.20Upgrade go1.19-raceUpgrade go1.19-docUpgrade go1.19Upgrade go1.20-doc | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19-goUpgrade golang-1.19-srcUpgrade golang-1.20-goUpgrade golang-1.20Upgrade golang-1.19Upgrade golang-1.20-src | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub