Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade aardvark-dnsUpgrade skopeo-testsUpgrade golangUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade golang-binUpgrade libslirp-develUpgrade containers-commonUpgrade skopeoUpgrade netavarkUpgrade golang-miscUpgrade podman-remoteUpgrade golang-srcUpgrade golang-raceUpgrade conmonUpgrade slirp4netnsUpgrade buildahUpgrade toolbox-testsUpgrade criuUpgrade podman-pluginsUpgrade libslirpUpgrade podman-testsUpgrade podman-dockerUpgrade crunUpgrade fuse-overlayfsUpgrade python3-criuUpgrade container-selinuxUpgrade delveUpgrade udicaUpgrade cockpit-podmanUpgrade golang-testsUpgrade criu-develUpgrade golang-docsUpgrade go-toolsetUpgrade podman-gvproxyUpgrade buildah-testsUpgrade python3-podmanUpgrade runcUpgrade critUpgrade podman-catatonitUpgrade toolbox | May 29, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-testsUpgrade amazon-ssm-agent-debuginfoUpgrade golang-sharedUpgrade golang-binUpgrade containerdUpgrade golang-docsUpgrade amazon-ssm-agentUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade dockerUpgrade golang-srcUpgrade golang-miscUpgrade docker-debuginfoUpgrade golang | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golangUpgrade amazon-ssm-agent | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-sharedUpgrade golang-docsUpgrade golang-raceUpgrade golang-binUpgrade golang-miscUpgrade golangUpgrade golang-src | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade criu-develUpgrade crun-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade go-toolsetUpgrade criu-debuginfoUpgrade conmon-debuginfoUpgrade delve-debuginfoUpgrade skopeo-testsUpgrade criu-libsUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade buildah-tests-debuginfoUpgrade python3-podmanUpgrade conmonUpgrade golang-raceUpgrade podman-debugsourceUpgrade container-selinuxUpgrade containernetworking-plugins-debugsourceUpgrade golang-srcUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade slirp4netnsUpgrade golangUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade delveUpgrade aardvark-dnsUpgrade golang-miscUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade criu-debugsourceUpgrade fuse-overlayfsUpgrade golang-binUpgrade buildah-debuginfoUpgrade cockpit-podmanUpgrade buildahUpgrade podman-debuginfoUpgrade critUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade criu-libs-debuginfoUpgrade netavarkUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade libslirp-debuginfoUpgrade udicaUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-dockerUpgrade criuUpgrade conmon-debugsourceUpgrade toolboxUpgrade delve-debugsourceUpgrade runcUpgrade skopeoUpgrade python3-criuUpgrade golang-docsUpgrade crunUpgrade buildah-testsUpgrade golang-testsUpgrade podman-catatonit-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfo | May 29, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade golang-raceUpgrade criu-develUpgrade conmonUpgrade podman-pluginsUpgrade podman-testsUpgrade python3-podmanUpgrade cockpit-podmanUpgrade netavarkUpgrade crunUpgrade podman-gvproxyUpgrade delveUpgrade libslirpUpgrade udicaUpgrade criuUpgrade skopeoUpgrade skopeo-testsUpgrade slirp4netnsUpgrade python3-criuUpgrade golangUpgrade go-toolsetUpgrade golang-docsUpgrade libslirp-develUpgrade golang-srcUpgrade critUpgrade containernetworking-pluginsUpgrade buildahUpgrade golang-binUpgrade containers-commonUpgrade container-selinuxUpgrade podman-remoteUpgrade podmanUpgrade buildah-testsUpgrade podman-catatonitUpgrade golang-testsUpgrade runcUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade aardvark-dnsUpgrade golang-misc | May 26, 2023 | Apr 20, 2023 |
| Rapid7 Scan Assistant | — | Upgrade to the latest version of Rapid7 InsightVM Scan Assistant | Jan 3, 2024 | May 11, 2023 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade openshiftUpgrade skopeoUpgrade podmanUpgrade buildah | Jun 8, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade buildah-debugsourceUpgrade golang-docsUpgrade golang-srcUpgrade libslirp-debuginfoUpgrade runc-debuginfoUpgrade libslirp-develUpgrade podman-catatonit-debuginfoUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade python3-podmanUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade fuse-overlayfs-debugsourceUpgrade golang-binUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade delve-debugsourceUpgrade podmanUpgrade delve-debuginfoUpgrade delveUpgrade critUpgrade crun-debugsourceUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criuUpgrade golang-raceUpgrade skopeoUpgrade runcUpgrade netavarkUpgrade crunUpgrade conmonUpgrade golang-testsUpgrade conmon-debugsourceUpgrade buildah-testsUpgrade aardvark-dnsUpgrade podman-dockerUpgrade skopeo-debugsourceUpgrade go-toolsetUpgrade podman-gvproxyUpgrade udicaUpgrade golang-miscUpgrade criu-debuginfoUpgrade toolbox-debuginfoUpgrade buildah-tests-debuginfoNo solution existsUpgrade slirp4netns-debuginfoUpgrade criu-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade container-selinuxUpgrade crun-debuginfoUpgrade libslirpUpgrade toolbox-testsUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade podman-plugins-debuginfoUpgrade cockpit-podmanUpgrade python3-criuUpgrade conmon-debuginfoUpgrade golangUpgrade skopeo-debuginfoUpgrade fuse-overlayfsUpgrade podman-testsUpgrade buildahUpgrade slirp4netns | May 29, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade podman-catatonitUpgrade crun-debugsourceUpgrade golang-raceUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade netavarkUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade runcUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remoteUpgrade criu-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade fuse-overlayfsUpgrade golangUpgrade critUpgrade buildah-debuginfoUpgrade containernetworking-pluginsUpgrade criu-libs-debuginfoUpgrade buildah-tests-debuginfoUpgrade golang-binUpgrade crunUpgrade criu-debugsourceUpgrade criu-develUpgrade conmonUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade buildah-testsUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade podman-testsUpgrade go-toolsetUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade criu-libsUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade buildahUpgrade runc-debugsourceUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade delveUpgrade delve-debuginfo | Mar 5, 2024 | May 11, 2023 |
| Suse | — | Upgrade go1.19-docUpgrade go1.19-raceUpgrade go1.20-raceUpgrade go1.20Upgrade go1.19Upgrade go1.20-doc | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19-goUpgrade golang-1.20Upgrade golang-1.19Upgrade golang-1.20-srcUpgrade golang-1.19-srcUpgrade golang-1.20-go | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub