Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-docsUpgrade criuUpgrade buildahUpgrade udicaUpgrade delveUpgrade podman-gvproxyUpgrade criu-develUpgrade cockpit-podmanUpgrade runcUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade critUpgrade python3-criuUpgrade golang-testsUpgrade podman-catatonitUpgrade golang-raceUpgrade podman-testsUpgrade go-toolsetUpgrade crunUpgrade conmonUpgrade python3-podmanUpgrade podman-dockerUpgrade libslirpUpgrade toolbox-testsUpgrade container-selinuxUpgrade toolboxUpgrade podman-pluginsUpgrade podman-remoteUpgrade golangUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade skopeoUpgrade netavarkUpgrade podmanUpgrade libslirp-develUpgrade golang-binUpgrade golang-srcUpgrade skopeo-testsUpgrade containers-commonUpgrade golang-miscUpgrade containernetworking-pluginsUpgrade criu-libs | May 29, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade golang-testsUpgrade golang-raceUpgrade amazon-ssm-agent-debuginfoUpgrade golang-binUpgrade golang-sharedUpgrade golang-docsUpgrade amazon-ssm-agentUpgrade dockerUpgrade golang-srcUpgrade golang-miscUpgrade docker-debuginfoUpgrade golang | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golangUpgrade amazon-ssm-agent | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-sharedUpgrade golang-docsUpgrade golang-raceUpgrade golangUpgrade golang-binUpgrade golang-miscUpgrade golang-src | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade conmonUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade criu-libsUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade runc-debuginfoUpgrade criu-debugsourceUpgrade skopeo-debuginfoUpgrade golang-raceUpgrade containers-commonUpgrade golang-miscUpgrade podman-remote-debuginfoUpgrade libslirpUpgrade delveUpgrade golang-srcUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade go-toolsetUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade libslirp-develUpgrade conmon-debuginfoUpgrade golangUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade python3-podmanUpgrade podman-pluginsUpgrade delve-debuginfoUpgrade criu-develUpgrade skopeo-testsUpgrade crun-debuginfoUpgrade skopeo-debugsourceUpgrade buildah-debugsourceUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade podman-dockerUpgrade delve-debugsourceUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade podman-remoteUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade golang-binUpgrade udicaUpgrade buildahUpgrade buildah-debuginfoUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade runc-debugsourceUpgrade critUpgrade netavarkUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade golang-testsUpgrade cockpit-podmanUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade crunUpgrade fuse-overlayfsUpgrade toolboxUpgrade conmon-debugsourceUpgrade python3-criuUpgrade skopeoUpgrade golang-docsUpgrade buildah-testsUpgrade containernetworking-plugins | May 29, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade criu-libsUpgrade aardvark-dnsUpgrade runcUpgrade golang-docsUpgrade podman-catatonitUpgrade python3-criuUpgrade golang-miscUpgrade golang-testsUpgrade container-selinuxUpgrade critUpgrade golang-srcUpgrade buildah-testsUpgrade buildahUpgrade podman-remoteUpgrade containers-commonUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade golang-binUpgrade containernetworking-pluginsUpgrade go-toolsetUpgrade golangUpgrade fuse-overlayfsUpgrade delveUpgrade python3-podmanUpgrade skopeo-testsUpgrade netavarkUpgrade podman-pluginsUpgrade conmonUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade criu-develUpgrade cockpit-podmanUpgrade libslirpUpgrade golang-raceUpgrade criuUpgrade crunUpgrade udicaUpgrade podman-testsUpgrade skopeoUpgrade podman-docker | May 26, 2023 | Apr 20, 2023 |
| Rapid7 Scan Assistant | — | Upgrade to the latest version of Rapid7 InsightVM Scan Assistant | Jan 3, 2024 | May 11, 2023 |
| Redhat Openshift | — | Upgrade podmanUpgrade openshift-clientsUpgrade skopeoUpgrade openshiftUpgrade buildah | Jun 8, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade golangUpgrade libslirpUpgrade udicaUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade skopeo-debugsourceUpgrade golang-miscUpgrade podman-testsUpgrade aardvark-dnsUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade conmon-debugsourceUpgrade toolbox-debuginfoUpgrade fuse-overlayfsUpgrade go-toolsetUpgrade buildah-tests-debuginfoUpgrade slirp4netnsUpgrade podman-dockerUpgrade cockpit-podmanUpgrade buildahUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade python3-criuUpgrade container-selinuxUpgrade podman-gvproxyNo solution existsUpgrade podman-plugins-debuginfoUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade crun-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade toolbox-testsUpgrade criuUpgrade skopeo-testsUpgrade golang-docsUpgrade golang-raceUpgrade crun-debugsourceUpgrade criu-libs-debuginfoUpgrade runcUpgrade delve-debuginfoUpgrade golang-testsUpgrade skopeoUpgrade delve-debugsourceUpgrade netavarkUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade podman-remoteUpgrade crunUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade podman-pluginsUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade golang-binUpgrade containernetworking-plugins-debuginfoUpgrade delveUpgrade python3-podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade golang-srcUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade runc-debuginfoUpgrade criu-libsUpgrade crit | May 29, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade libslirp-debuginfoUpgrade critUpgrade criu-libs-debuginfoUpgrade netavarkUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade criu-debuginfoUpgrade delve-debugsourceUpgrade podman-catatonitUpgrade golang-raceUpgrade crun-debugsourceUpgrade containers-commonUpgrade crunUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade golangUpgrade podman-pluginsUpgrade fuse-overlayfsUpgrade podman-debuginfoUpgrade conmon-debugsourceUpgrade podmanUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade golang-binUpgrade criuUpgrade buildah-tests-debuginfoUpgrade conmon-debuginfoUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade delveUpgrade conmonUpgrade runc-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade aardvark-dnsUpgrade buildahUpgrade containernetworking-plugins-debuginfoUpgrade go-toolsetUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade slirp4netnsUpgrade delve-debuginfoUpgrade criu-debugsourceUpgrade podman-testsUpgrade criu-libsUpgrade crun-debuginfoUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade buildah-testsUpgrade slirp4netns-debuginfoUpgrade libslirp | Mar 5, 2024 | May 11, 2023 |
| Suse | — | Upgrade go1.20Upgrade go1.20-raceUpgrade go1.19-raceUpgrade go1.19-docUpgrade go1.19Upgrade go1.20-doc | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19-srcUpgrade golang-1.20-goUpgrade golang-1.20-srcUpgrade golang-1.19Upgrade golang-1.20Upgrade golang-1.19-go | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub