Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-testsUpgrade container-selinuxUpgrade conmonUpgrade critUpgrade libslirpUpgrade podman-pluginsUpgrade podman-dockerUpgrade udicaUpgrade buildah-testsUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade golang-testsUpgrade go-toolsetUpgrade buildahUpgrade runcUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade criuUpgrade fuse-overlayfsUpgrade criu-develUpgrade python3-podmanUpgrade golang-docsUpgrade crunUpgrade toolboxUpgrade golang-raceUpgrade delveUpgrade python3-criuUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade containernetworking-pluginsUpgrade golangUpgrade podman-remoteUpgrade criu-libsUpgrade aardvark-dnsUpgrade skopeoUpgrade skopeo-testsUpgrade netavarkUpgrade containers-commonUpgrade podmanUpgrade golang-srcUpgrade golang-binUpgrade libslirp-devel | May 29, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade docker-debuginfoUpgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-raceUpgrade golang-binUpgrade amazon-ssm-agent-debuginfoUpgrade containerd-debuginfoUpgrade golang-testsUpgrade golang-docsUpgrade amazon-ssm-agentUpgrade containerdUpgrade golang-sharedUpgrade containerd-stress | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade amazon-ssm-agentUpgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-docsUpgrade golang-raceUpgrade golang-sharedUpgrade golangUpgrade golang-miscUpgrade golang-binUpgrade golang-src | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade criu-libsUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade criu-develUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade container-selinuxUpgrade libslirp-develUpgrade go-toolsetUpgrade delveUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade aardvark-dnsUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade golang-miscUpgrade podman-pluginsUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade golang-srcUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade delve-debuginfoUpgrade skopeo-testsUpgrade golangUpgrade podman-gvproxyUpgrade crun-debugsourceUpgrade libslirpUpgrade conmonUpgrade golang-raceUpgrade delve-debugsourceUpgrade podman-dockerUpgrade criuUpgrade podman-catatonit-debuginfoUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-testsUpgrade cockpit-podmanUpgrade buildahUpgrade buildah-debuginfoUpgrade skopeoUpgrade python3-criuUpgrade golang-docsUpgrade crunUpgrade buildah-testsUpgrade netavarkUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade criu-libs-debuginfoUpgrade critUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade golang-binUpgrade udicaUpgrade podman-remoteUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade toolboxUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade runc-debugsourceUpgrade runcUpgrade podman-gvproxy-debuginfo | May 29, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade golang-raceUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade podman-dockerUpgrade delveUpgrade skopeoUpgrade podman-pluginsUpgrade criu-develUpgrade conmonUpgrade slirp4netnsUpgrade crunUpgrade netavarkUpgrade python3-podmanUpgrade libslirpUpgrade criuUpgrade cockpit-podmanUpgrade udicaUpgrade podman-testsUpgrade podman-remoteUpgrade podmanUpgrade container-selinuxUpgrade containers-commonUpgrade buildahUpgrade buildah-testsUpgrade golang-srcUpgrade critUpgrade podman-catatonitUpgrade runcUpgrade golang-miscUpgrade fuse-overlayfsUpgrade criu-libsUpgrade golang-testsUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade golangUpgrade golang-docsUpgrade python3-criuUpgrade go-toolsetUpgrade golang-binUpgrade containernetworking-plugins | May 26, 2023 | Apr 20, 2023 |
| Rapid7 Scan Assistant | — | Upgrade to the latest version of Rapid7 InsightVM Scan Assistant | Jan 3, 2024 | May 11, 2023 |
| Redhat Openshift | — | Upgrade skopeoUpgrade openshift-clientsUpgrade openshiftUpgrade podmanUpgrade buildah | Jun 8, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade libslirp-debuginfoUpgrade buildah-debugsourceUpgrade runc-debuginfoUpgrade golang-docsUpgrade golang-binUpgrade golang-srcUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade criuUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade criu-libs-debuginfoUpgrade criu-libsUpgrade delve-debugsourceUpgrade skopeoUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-testsUpgrade golang-raceUpgrade skopeo-testsUpgrade podman-pluginsUpgrade podman-catatonitUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-debugsourceUpgrade netavarkUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade python3-podmanUpgrade podman-remoteUpgrade containers-commonUpgrade podman-debuginfoUpgrade podmanUpgrade delveUpgrade podman-catatonit-debuginfoUpgrade criu-develUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-debugsourceUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade crunUpgrade podman-gvproxyUpgrade golangUpgrade golang-miscUpgrade criu-debugsourceNo solution existsUpgrade toolbox-testsUpgrade buildahUpgrade podman-testsUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade udicaUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade go-toolsetUpgrade aardvark-dnsUpgrade skopeo-debugsourceUpgrade toolbox-debuginfoUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-dockerUpgrade slirp4netns-debuginfoUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade container-selinuxUpgrade cockpit-podman | May 29, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade conmon-debugsourceUpgrade golang-raceUpgrade critUpgrade podman-debuginfoUpgrade podmanUpgrade podman-pluginsUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-catatonitUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade containernetworking-pluginsUpgrade crunUpgrade criu-debuginfoUpgrade delve-debugsourceUpgrade netavarkUpgrade golang-binUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade buildah-debuginfoUpgrade golangUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade containers-commonUpgrade criuUpgrade buildah-debugsourceUpgrade runcUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade conmonUpgrade slirp4netns-debuginfoUpgrade libslirpUpgrade podman-testsUpgrade libslirp-develUpgrade go-toolsetUpgrade buildahUpgrade aardvark-dnsUpgrade delveUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade delve-debuginfoUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade containernetworking-plugins-debuginfoUpgrade buildah-tests | Mar 5, 2024 | May 11, 2023 |
| Suse | — | Upgrade go1.19-docUpgrade go1.19-raceUpgrade go1.20Upgrade go1.20-raceUpgrade go1.20-docUpgrade go1.19 | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20Upgrade golang-1.19-goUpgrade golang-1.20-srcUpgrade golang-1.20-goUpgrade golang-1.19Upgrade golang-1.19-src | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub