Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criu-develUpgrade go-toolsetUpgrade golang-testsUpgrade criuUpgrade container-selinuxUpgrade slirp4netnsUpgrade runcUpgrade podman-testsUpgrade buildahUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade conmonUpgrade python3-podmanUpgrade toolboxUpgrade delveUpgrade buildah-testsUpgrade critUpgrade fuse-overlayfsUpgrade golang-docsUpgrade python3-criuUpgrade golang-raceUpgrade podman-dockerUpgrade crunUpgrade libslirpUpgrade udicaUpgrade podman-catatonitUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade skopeoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade golang-binUpgrade podman-remoteUpgrade containers-commonUpgrade podmanUpgrade criu-libsUpgrade netavarkUpgrade golangUpgrade golang-srcUpgrade skopeo-testsUpgrade containernetworking-plugins | May 29, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade golang-miscUpgrade docker-debuginfoUpgrade golangUpgrade golang-srcUpgrade amazon-ssm-agentUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade containerdUpgrade golang-testsUpgrade amazon-ssm-agent-debuginfoUpgrade golang-docsUpgrade golang-binUpgrade golang-raceUpgrade golang-shared | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade amazon-ssm-agentUpgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-srcUpgrade golang-binUpgrade golang-miscUpgrade golang-raceUpgrade golang-sharedUpgrade golang-docsUpgrade golang-tests | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade delve-debuginfoUpgrade container-selinuxUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade delveUpgrade containers-commonUpgrade libslirp-develUpgrade podman-debugsourceUpgrade golang-miscUpgrade podman-pluginsUpgrade golangUpgrade podman-remote-debuginfoUpgrade criu-libsUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debuginfoUpgrade slirp4netns-debuginfoUpgrade crun-debuginfoUpgrade criu-debuginfoUpgrade go-toolsetUpgrade golang-srcUpgrade slirp4netns-debugsourceUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade containernetworking-plugins-debuginfoUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade criu-develUpgrade skopeo-testsUpgrade libslirpUpgrade conmonUpgrade golang-raceUpgrade podman-gvproxyUpgrade crun-debugsourceUpgrade udicaUpgrade buildah-testsUpgrade golang-testsUpgrade delve-debugsourceUpgrade criuUpgrade conmon-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade golang-binUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade critUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade fuse-overlayfsUpgrade skopeoUpgrade python3-criuUpgrade golang-docsUpgrade crunUpgrade cockpit-podmanUpgrade buildahUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolboxUpgrade podman-testsUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-debuginfoUpgrade toolbox-debuginfoUpgrade runc-debugsourceUpgrade runcUpgrade podman-docker | May 29, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade runcUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade golang-binUpgrade golang-miscUpgrade golang-testsUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade criu-libsUpgrade containers-commonUpgrade buildahUpgrade podman-remoteUpgrade go-toolsetUpgrade libslirp-develUpgrade python3-criuUpgrade critUpgrade golangUpgrade golang-docsUpgrade golang-srcUpgrade buildah-testsUpgrade container-selinuxUpgrade podmanUpgrade podman-dockerUpgrade podman-pluginsUpgrade skopeoUpgrade skopeo-testsUpgrade golang-raceUpgrade criu-develUpgrade slirp4netnsUpgrade libslirpUpgrade python3-podmanUpgrade cockpit-podmanUpgrade netavarkUpgrade conmonUpgrade udicaUpgrade criuUpgrade podman-testsUpgrade crunUpgrade podman-gvproxyUpgrade delve | May 26, 2023 | Apr 20, 2023 |
| Rapid7 Scan Assistant | — | Upgrade to the latest version of Rapid7 InsightVM Scan Assistant | Jan 3, 2024 | May 11, 2023 |
| Redhat Openshift | — | Upgrade buildahUpgrade skopeoUpgrade openshiftUpgrade openshift-clientsUpgrade podman | Jun 8, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criuUpgrade golang-docsUpgrade golang-srcUpgrade toolbox-debugsourceUpgrade libslirp-develUpgrade crunUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade podman-pluginsUpgrade golang-binUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade libslirp-debuginfoUpgrade containers-commonUpgrade podman-debuginfoUpgrade criu-develUpgrade delveUpgrade podman-debugsourceUpgrade python3-podmanUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade skopeoUpgrade containernetworking-pluginsUpgrade golang-testsUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade libslirp-debugsourceUpgrade delve-debugsourceUpgrade netavarkUpgrade criu-libs-debuginfoUpgrade delve-debuginfoUpgrade critUpgrade runcUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade golang-raceUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade conmonUpgrade podman-remoteUpgrade podman-catatonitUpgrade slirp4netnsUpgrade podman-testsUpgrade conmon-debugsourceUpgrade skopeo-debugsourceUpgrade go-toolsetUpgrade cockpit-podmanUpgrade buildah-testsUpgrade buildahUpgrade podman-dockerUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade container-selinuxUpgrade skopeo-debuginfoUpgrade podman-gvproxyUpgrade golangNo solution existsUpgrade toolbox-testsUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade libslirpUpgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade buildah-debuginfoUpgrade toolbox-debuginfoUpgrade fuse-overlayfsUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade golang-miscUpgrade udica | May 29, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade conmon-debugsourceUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade criuUpgrade runcUpgrade delve-debugsourceUpgrade golang-binUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade libslirp-debuginfoUpgrade crunUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade criu-libs-debuginfoUpgrade critUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-pluginsUpgrade golang-raceUpgrade crun-debugsourceUpgrade podman-catatonitUpgrade podman-remoteUpgrade containers-commonUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade golangUpgrade buildah-tests-debuginfoUpgrade delve-debuginfoUpgrade criu-develUpgrade libslirpUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade conmonUpgrade delveUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade criu-libsUpgrade libslirp-debugsourceUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade podman-testsUpgrade go-toolsetUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debuginfoUpgrade runc-debugsource | Mar 5, 2024 | May 11, 2023 |
| Suse | — | Upgrade go1.19-raceUpgrade go1.20Upgrade go1.19-docUpgrade go1.20-raceUpgrade go1.20-docUpgrade go1.19 | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20Upgrade golang-1.19-goUpgrade golang-1.20-srcUpgrade golang-1.19Upgrade golang-1.20-goUpgrade golang-1.19-src | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub