Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade toolboxUpgrade udicaUpgrade conmonUpgrade podman-pluginsUpgrade podman-testsUpgrade podmanUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade libslirpUpgrade python3-criuUpgrade libslirp-develUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade criu-develUpgrade crunUpgrade criu-libsUpgrade containers-commonUpgrade skopeoUpgrade runcUpgrade cockpit-podmanUpgrade buildahUpgrade buildah-testsUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade podman-dockerUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade netavarkUpgrade criuUpgrade podman-catatonitUpgrade slirp4netnsUpgrade podman-remote | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade golang-docsUpgrade golang-binUpgrade golang-miscUpgrade containerd-debuginfoUpgrade golangUpgrade golang-sharedUpgrade containerd-stressUpgrade golang-testsUpgrade golang-srcUpgrade golang-race | Jun 6, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-sharedUpgrade golang-docsUpgrade golang-binUpgrade golang-race | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade go-toolsetUpgrade podman-gvproxyUpgrade buildah-debuginfoUpgrade slirp4netns-debuginfoUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade crunUpgrade conmonUpgrade cockpit-podmanUpgrade container-selinuxUpgrade skopeo-debugsourceUpgrade python3-criuUpgrade skopeo-debuginfoUpgrade libslirpUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debuginfoUpgrade golang-raceUpgrade slirp4netnsUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade podman-plugins-debuginfoUpgrade python3-podmanUpgrade buildahUpgrade podman-dockerUpgrade podman-debugsourceUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade golang-miscUpgrade containers-commonUpgrade golang-srcUpgrade golang-docsUpgrade golang-testsUpgrade podman-remote-debuginfoUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade podman-debuginfoUpgrade udicaUpgrade netavarkUpgrade skopeo-testsUpgrade criu-debugsourceUpgrade criuUpgrade toolboxUpgrade skopeoUpgrade podman-remoteUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade golangUpgrade criu-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade runcUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade delveUpgrade crun-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonitUpgrade delve-debugsourceUpgrade golang-binUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debuginfoUpgrade criu-libs-debuginfoUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade criu-libsUpgrade toolbox-debugsourceUpgrade podman-plugins | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade podman-testsUpgrade cockpit-podmanUpgrade container-selinuxUpgrade crunUpgrade criu-develUpgrade podman-dockerUpgrade slirp4netnsUpgrade podman-catatonitUpgrade critUpgrade containernetworking-pluginsUpgrade criuUpgrade python3-criuUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade skopeo-testsUpgrade podmanUpgrade runcUpgrade podman-remoteUpgrade udicaUpgrade python3-podmanUpgrade netavarkUpgrade libslirp-develUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade fuse-overlayfsUpgrade buildahUpgrade buildah-testsUpgrade containers-commonUpgrade criu-libsUpgrade aardvark-dnsUpgrade conmon | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade podmanUpgrade microshiftUpgrade skopeoUpgrade openshift-clientsUpgrade cri-tools | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade fuse-overlayfsUpgrade libslirp-debugsourceUpgrade golang-binUpgrade podmanUpgrade golang-docsUpgrade podman-remoteUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade podman-dockerUpgrade criu-libs-debuginfoUpgrade golang-testsUpgrade toolbox-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade netavarkUpgrade podman-gvproxy-debuginfoUpgrade crunUpgrade libslirp-debuginfoUpgrade skopeoUpgrade buildah-debuginfoUpgrade toolbox-debugsourceUpgrade python3-criuUpgrade buildahUpgrade runcUpgrade toolboxUpgrade critUpgrade buildah-testsUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debuginfoUpgrade skopeo-debugsourceUpgrade delve-debugsourceNo solution existsUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade udicaUpgrade criu-debugsourceUpgrade podman-catatonitUpgrade crun-debuginfoUpgrade crun-debugsourceUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-testsUpgrade podman-pluginsUpgrade aardvark-dnsUpgrade delve-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-debuginfoUpgrade conmonUpgrade golang-miscUpgrade criu-libsUpgrade libslirp-develUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade conmon-debuginfoUpgrade container-selinuxUpgrade delveUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade golang-raceUpgrade cockpit-podmanUpgrade runc-debuginfoUpgrade containers-commonUpgrade golangUpgrade python3-podmanUpgrade podman-gvproxyUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade skopeo-testsUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade golang-srcUpgrade go-toolset | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade containers-commonUpgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade criu-develUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade podman-debugsourceUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade crunUpgrade conmonUpgrade criu-libsUpgrade podmanUpgrade podman-remote-debuginfoUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade python3-criuUpgrade buildahUpgrade aardvark-dnsUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade criu-debuginfoUpgrade runc-debugsourceUpgrade criuUpgrade netavarkUpgrade runcUpgrade slirp4netnsUpgrade podman-testsUpgrade podman-catatonitUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade libslirpUpgrade critUpgrade criu-libs-debuginfoUpgrade conmon-debugsourceUpgrade runc-debuginfoUpgrade libslirp-devel | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19Upgrade go1.20-docUpgrade go1.19-docUpgrade go1.20Upgrade go1.20-raceUpgrade go1.19-race | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19-goUpgrade golang-1.19-srcUpgrade golang-1.20-goUpgrade golang-1.20Upgrade golang-1.19Upgrade golang-1.20-src | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub