Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-testsUpgrade crunUpgrade container-selinuxUpgrade fuse-overlayfsUpgrade python3-criuUpgrade delveUpgrade python3-podmanUpgrade buildah-testsUpgrade toolbox-testsUpgrade runcUpgrade podman-gvproxyUpgrade critUpgrade toolboxUpgrade podman-catatonitUpgrade conmonUpgrade golang-raceUpgrade slirp4netnsUpgrade criu-develUpgrade go-toolsetUpgrade golang-docsUpgrade buildahUpgrade criuUpgrade cockpit-podmanUpgrade golang-testsUpgrade podman-dockerUpgrade udicaUpgrade libslirpUpgrade podman-pluginsUpgrade skopeo-testsUpgrade golangUpgrade containernetworking-pluginsUpgrade golang-miscUpgrade podmanUpgrade containers-commonUpgrade podman-remoteUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade golang-binUpgrade libslirp-develUpgrade golang-srcUpgrade aardvark-dnsUpgrade skopeoUpgrade netavark | May 29, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade amazon-ssm-agent-debuginfoUpgrade golang-binUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade golang-docsUpgrade amazon-ssm-agentUpgrade golang-sharedUpgrade containerdUpgrade golang-testsUpgrade golang-raceUpgrade docker-debuginfoUpgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade docker | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade amazon-ssm-agentUpgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-docsUpgrade golang-sharedUpgrade golang-testsUpgrade golang-race | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade go-toolsetUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade podman-debugsourceUpgrade delveUpgrade golangUpgrade container-selinuxUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade aardvark-dnsUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade golang-miscUpgrade podman-pluginsUpgrade criu-debugsourceUpgrade python3-podmanUpgrade golang-srcUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade delve-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade libslirpUpgrade podman-gvproxyUpgrade golang-raceUpgrade crun-debugsourceUpgrade conmonUpgrade golang-binUpgrade toolboxUpgrade conmon-debugsourceUpgrade libslirp-debugsourceUpgrade udicaUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade critUpgrade podmanUpgrade netavarkUpgrade criu-libs-debuginfoUpgrade skopeoUpgrade python3-criuUpgrade golang-docsUpgrade crunUpgrade buildah-testsUpgrade toolbox-testsUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade runc-debugsourceUpgrade runcUpgrade podman-dockerUpgrade delve-debugsourceUpgrade criuUpgrade podman-gvproxy-debuginfoUpgrade buildah-debuginfoUpgrade golang-testsUpgrade cockpit-podmanUpgrade buildahUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade skopeo-debugsourceUpgrade libslirp-debuginfoUpgrade buildah-debugsourceUpgrade toolbox-debugsource | May 29, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade criuUpgrade podman-pluginsUpgrade python3-podmanUpgrade conmonUpgrade netavarkUpgrade udicaUpgrade libslirpUpgrade skopeoUpgrade skopeo-testsUpgrade delveUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade criu-develUpgrade podman-dockerUpgrade podman-testsUpgrade golang-raceUpgrade crunUpgrade golangUpgrade go-toolsetUpgrade libslirp-develUpgrade container-selinuxUpgrade buildah-testsUpgrade podman-remoteUpgrade buildahUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade golang-binUpgrade golang-testsUpgrade golang-miscUpgrade oci-seccomp-bpf-hookUpgrade runcUpgrade critUpgrade golang-srcUpgrade criu-libsUpgrade aardvark-dnsUpgrade golang-docsUpgrade containers-commonUpgrade python3-criuUpgrade podman | May 26, 2023 | Apr 20, 2023 |
| Rapid7 Scan Assistant | — | Upgrade to the latest version of Rapid7 InsightVM Scan Assistant | Jan 3, 2024 | May 11, 2023 |
| Redhat Openshift | — | Upgrade buildahUpgrade openshiftUpgrade openshift-clientsUpgrade skopeoUpgrade podman | Jun 8, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-dockerUpgrade conmon-debuginfoUpgrade buildahUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade podman-testsUpgrade golang-miscUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade fuse-overlayfsUpgrade podman-gvproxyNo solution existsUpgrade criu-debuginfoUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade udicaUpgrade podman-plugins-debuginfoUpgrade container-selinuxUpgrade crun-debuginfoUpgrade toolbox-testsUpgrade runc-debugsourceUpgrade libslirpUpgrade criu-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade golangUpgrade buildah-testsUpgrade go-toolsetUpgrade libslirp-develUpgrade crun-debugsourceUpgrade golang-docsUpgrade golang-testsUpgrade podman-remote-debuginfoUpgrade criu-libs-debuginfoUpgrade golang-raceUpgrade delve-debuginfoUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-remoteUpgrade conmonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade critUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade golang-binUpgrade containernetworking-plugins-debuginfoUpgrade podman-pluginsUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade criu-libsUpgrade podmanUpgrade skopeoUpgrade containernetworking-pluginsUpgrade toolboxUpgrade criuUpgrade python3-podmanUpgrade skopeo-testsUpgrade netavarkUpgrade slirp4netns-debugsourceUpgrade delve-debugsourceUpgrade runcUpgrade toolbox-debugsourceUpgrade podman-debuginfoUpgrade criu-develUpgrade delveUpgrade crunUpgrade golang-srcUpgrade libslirp-debuginfo | May 29, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade runc-debugsourceUpgrade criu-develUpgrade delveUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxyUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade aardvark-dnsUpgrade buildahUpgrade podman-gvproxy-debuginfoUpgrade buildah-testsUpgrade crun-debuginfoUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade criu-libsUpgrade go-toolsetUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade libslirpUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-pluginsUpgrade criu-debuginfoUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade runcUpgrade netavarkUpgrade buildah-debugsourceUpgrade delve-debugsourceUpgrade libslirp-debuginfoUpgrade golang-binUpgrade podman-catatonit-debuginfoUpgrade golang-raceUpgrade crun-debugsourceUpgrade criu-libs-debuginfoUpgrade critUpgrade fuse-overlayfs-debugsourceUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade golangUpgrade buildah-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade buildah-debuginfoUpgrade podmanUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade conmon-debugsourceUpgrade crunUpgrade oci-seccomp-bpf-hook-debugsource | Mar 5, 2024 | May 11, 2023 |
| Suse | — | Upgrade go1.19-raceUpgrade go1.20-raceUpgrade go1.20Upgrade go1.19-docUpgrade go1.20-docUpgrade go1.19 | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19-srcUpgrade golang-1.19Upgrade golang-1.20-srcUpgrade golang-1.20-goUpgrade golang-1.20Upgrade golang-1.19-go | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub