Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade skopeoUpgrade containers-commonUpgrade criu-libsUpgrade golang-srcUpgrade skopeo-testsUpgrade golang-miscUpgrade podman-remoteUpgrade golangUpgrade libslirp-develUpgrade aardvark-dnsUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade golang-binUpgrade containernetworking-pluginsUpgrade netavarkUpgrade podman-catatonitUpgrade toolbox-testsUpgrade conmonUpgrade toolboxUpgrade critUpgrade crunUpgrade criu-develUpgrade criuUpgrade golang-testsUpgrade runcUpgrade udicaUpgrade container-selinuxUpgrade fuse-overlayfsUpgrade python3-criuUpgrade podman-gvproxyUpgrade delveUpgrade buildah-testsUpgrade libslirpUpgrade python3-podmanUpgrade podman-dockerUpgrade buildahUpgrade cockpit-podmanUpgrade golang-raceUpgrade slirp4netnsUpgrade podman-pluginsUpgrade podman-testsUpgrade go-toolsetUpgrade golang-docs | May 29, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-sharedUpgrade containerd-stressUpgrade amazon-ssm-agent-debuginfoUpgrade containerdUpgrade amazon-ssm-agentUpgrade golang-docsUpgrade containerd-debuginfoUpgrade golang-raceUpgrade golang-binUpgrade docker-debuginfoUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade docker | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade amazon-ssm-agentUpgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-raceUpgrade golang-sharedUpgrade golang-docsUpgrade golang-testsUpgrade golangUpgrade golang-miscUpgrade golang-binUpgrade golang-src | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade criuUpgrade delve-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-dockerUpgrade libslirp-debuginfoUpgrade skopeo-debugsourceUpgrade buildah-debuginfoUpgrade runcUpgrade buildah-debugsourceUpgrade toolbox-debugsourceUpgrade critUpgrade toolbox-testsUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade criu-libs-debuginfoUpgrade conmon-debugsourceUpgrade podmanUpgrade toolbox-debuginfoUpgrade podman-testsUpgrade toolboxUpgrade fuse-overlayfsUpgrade crunUpgrade golang-docsUpgrade buildah-testsUpgrade python3-criuUpgrade skopeoUpgrade podman-debuginfoUpgrade buildahUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-testsUpgrade podman-catatonitUpgrade golang-binUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsourceUpgrade podman-remoteUpgrade udicaUpgrade golangUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade delveUpgrade containernetworking-plugins-debuginfoUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-raceUpgrade conmonUpgrade skopeo-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade golang-miscUpgrade criu-debugsourceUpgrade containers-commonUpgrade aardvark-dnsUpgrade slirp4netns-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade python3-podmanUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade libslirp-develUpgrade containernetworking-plugins-debugsourceUpgrade container-selinuxUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade criu-libsUpgrade delve-debuginfoUpgrade skopeo-testsUpgrade crun-debugsourceUpgrade go-toolsetUpgrade libslirpUpgrade runc-debuginfo | May 29, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade golang-raceUpgrade podman-pluginsUpgrade skopeo-testsUpgrade udicaUpgrade python3-podmanUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade skopeoUpgrade criuUpgrade conmonUpgrade libslirpUpgrade netavarkUpgrade podman-dockerUpgrade criu-develUpgrade delveUpgrade podman-gvproxyUpgrade crunUpgrade podman-testsUpgrade podman-remoteUpgrade python3-criuUpgrade golang-docsUpgrade containers-commonUpgrade podmanUpgrade golang-srcUpgrade critUpgrade aardvark-dnsUpgrade criu-libsUpgrade golangUpgrade go-toolsetUpgrade libslirp-develUpgrade buildah-testsUpgrade golang-binUpgrade containernetworking-pluginsUpgrade buildahUpgrade runcUpgrade podman-catatonitUpgrade golang-testsUpgrade golang-miscUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hookUpgrade container-selinux | May 26, 2023 | Apr 20, 2023 |
| Rapid7 Scan Assistant | — | Upgrade to the latest version of Rapid7 InsightVM Scan Assistant | Jan 3, 2024 | May 11, 2023 |
| Redhat Openshift | — | Upgrade openshiftUpgrade skopeoUpgrade openshift-clientsUpgrade podmanUpgrade buildah | Jun 8, 2023 | May 11, 2023 |
| Redhat_linux | — | Upgrade conmonUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade netavarkUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade criu-develUpgrade delveUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade python3-podmanUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade podmanUpgrade criuUpgrade golang-docsUpgrade buildah-debugsourceUpgrade golang-srcUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonit-debuginfoUpgrade golang-binUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeoUpgrade golang-raceUpgrade toolbox-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade criu-libsUpgrade crun-debugsourceUpgrade runcUpgrade critUpgrade golang-testsUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade delve-debuginfoUpgrade crunUpgrade podman-gvproxy-debuginfoUpgrade skopeo-debuginfoUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade golangUpgrade slirp4netns-debuginfoUpgrade golang-miscUpgrade criu-debuginfoUpgrade udicaUpgrade podman-testsUpgrade criu-debugsourceUpgrade container-selinuxUpgrade podman-gvproxyUpgrade toolbox-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade fuse-overlayfsUpgrade go-toolsetUpgrade conmon-debugsourceUpgrade libslirpNo solution existsUpgrade skopeo-debugsourceUpgrade podman-dockerUpgrade aardvark-dnsUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade buildah-testsUpgrade buildahUpgrade cockpit-podman | May 29, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade podman-debuginfoUpgrade conmon-debugsourceUpgrade podman-pluginsUpgrade podmanUpgrade criu-libs-debuginfoUpgrade crun-debugsourceUpgrade podman-catatonitUpgrade critUpgrade golangUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade golang-raceUpgrade runcUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade delve-debugsourceUpgrade golang-binUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade crunUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debuginfoUpgrade criuUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade go-toolsetUpgrade buildahUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade delve-debuginfoUpgrade podman-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade crun-debuginfoUpgrade criu-libsUpgrade python3-criuUpgrade delveUpgrade criu-develUpgrade conmon-debuginfoUpgrade conmonUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade buildah-testsUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debuginfoUpgrade libslirpUpgrade slirp4netns-debugsourceUpgrade podman-testsUpgrade libslirp-devel | Mar 5, 2024 | May 11, 2023 |
| Suse | — | Upgrade go1.20-docUpgrade go1.19Upgrade go1.19-raceUpgrade go1.20-raceUpgrade go1.20Upgrade go1.19-doc | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20Upgrade golang-1.19-goUpgrade golang-1.19Upgrade golang-1.20-srcUpgrade golang-1.20-goUpgrade golang-1.19-src | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub