Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade udicaUpgrade critUpgrade podman-remoteUpgrade buildah-testsUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade buildahUpgrade podmanUpgrade criu-libsUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade runcUpgrade python3-criuUpgrade criuUpgrade containers-commonUpgrade container-selinuxUpgrade podman-dockerUpgrade podman-gvproxyUpgrade libslirpUpgrade cockpit-podmanUpgrade criu-develUpgrade python3-podmanUpgrade skopeoUpgrade podman-testsUpgrade podman-pluginsUpgrade crunUpgrade fuse-overlayfsUpgrade netavarkUpgrade slirp4netnsUpgrade skopeo-testsUpgrade toolboxUpgrade conmonUpgrade toolbox-tests | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade containerd-stressUpgrade golang-srcUpgrade golang-docsUpgrade golang-testsUpgrade golangUpgrade golang-miscUpgrade containerdUpgrade golang-sharedUpgrade golang-raceUpgrade containerd-debuginfo | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 11, 2023 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-raceUpgrade golang-binUpgrade golang-testsUpgrade golang-sharedUpgrade golang-docs | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade python3-podmanUpgrade runc-debuginfoUpgrade podman-testsUpgrade skopeo-testsUpgrade buildah-debugsourceUpgrade criuUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade podman-pluginsUpgrade delve-debugsourceUpgrade netavarkUpgrade skopeoUpgrade toolboxUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-develUpgrade podman-dockerUpgrade delveUpgrade skopeo-debuginfoUpgrade crunUpgrade golang-miscUpgrade podman-gvproxyUpgrade skopeo-debugsourceUpgrade conmonUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade golangUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade libslirpUpgrade criu-develUpgrade golang-raceUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonitUpgrade podmanUpgrade runc-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-debugsourceUpgrade go-toolsetUpgrade containers-commonUpgrade buildahUpgrade podman-plugins-debuginfoUpgrade golang-srcUpgrade golang-binUpgrade delve-debuginfoUpgrade libslirp-debuginfoUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade buildah-testsUpgrade critUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade runcUpgrade podman-debuginfoUpgrade golang-testsUpgrade golang-docsUpgrade fuse-overlayfs-debugsourceUpgrade udicaUpgrade oci-seccomp-bpf-hookUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade container-selinuxUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade slirp4netns-debuginfoUpgrade python3-criu | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade libslirpUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade podman-testsUpgrade podman-dockerUpgrade aardvark-dnsUpgrade critUpgrade conmonUpgrade udicaUpgrade python3-podmanUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade netavarkUpgrade python3-criuUpgrade criuUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade crunUpgrade buildahUpgrade runcUpgrade criu-libsUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade podman-remoteUpgrade criu-develUpgrade podmanUpgrade skopeoUpgrade container-selinuxUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-devel | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade buildahUpgrade cri-toolsUpgrade openshift-clientsUpgrade microshiftUpgrade podmanUpgrade skopeo | Jun 15, 2023 | May 11, 2023 |
| Redhat_linux | — | Upgrade criu-debugsourceUpgrade podman-gvproxyUpgrade golang-srcUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade criu-debuginfoUpgrade golangUpgrade conmonUpgrade golang-raceUpgrade libslirp-develUpgrade crun-debugsourceUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade podman-remote-debuginfoUpgrade buildahUpgrade netavarkUpgrade toolboxUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade delve-debugsourceUpgrade buildah-testsUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debuginfoUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade python3-podmanUpgrade golang-miscUpgrade podman-dockerUpgrade python3-criuUpgrade podman-testsUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade crunUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade container-selinuxUpgrade runcUpgrade golang-testsUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade skopeo-debuginfoUpgrade slirp4netns-debugsourceUpgrade podmanUpgrade criu-libs-debuginfoUpgrade criuUpgrade udicaUpgrade delveUpgrade podman-pluginsUpgrade go-toolsetUpgrade podman-remoteUpgrade criu-develUpgrade podman-plugins-debuginfoUpgrade golang-docsUpgrade critUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debuginfoUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade golang-binUpgrade skopeo-testsUpgrade libslirp-debuginfoUpgrade cockpit-podmanUpgrade podman-debuginfoUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoNo solution exists | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade conmon-debugsourceUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade podman-debuginfoUpgrade buildah-tests-debuginfoUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade netavarkUpgrade critUpgrade criu-develUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmonUpgrade runcUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debuginfoUpgrade criuUpgrade podmanUpgrade podman-remoteUpgrade criu-debuginfoUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade conmon-debuginfoUpgrade buildahUpgrade podman-plugins-debuginfoUpgrade buildah-testsUpgrade runc-debuginfoUpgrade python3-criuUpgrade podman-testsUpgrade libslirp-debugsourceUpgrade aardvark-dnsUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade buildah-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirpUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade libslirp-develUpgrade criu-debugsource | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19Upgrade go1.20-raceUpgrade go1.19-raceUpgrade go1.19-docUpgrade go1.20-docUpgrade go1.20 | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20-goUpgrade golang-1.20Upgrade golang-1.20-srcUpgrade golang-1.19-goUpgrade golang-1.19Upgrade golang-1.19-src | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub