Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podmanUpgrade runcUpgrade container-selinuxUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade udicaUpgrade criuUpgrade aardvark-dnsUpgrade libslirp-develUpgrade criu-libsUpgrade buildahUpgrade containers-commonUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade critUpgrade podman-catatonitUpgrade python3-criuUpgrade toolboxUpgrade skopeo-testsUpgrade slirp4netnsUpgrade conmonUpgrade crunUpgrade netavarkUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade fuse-overlayfsUpgrade libslirpUpgrade podman-testsUpgrade podman-gvproxyUpgrade podman-dockerUpgrade skopeoUpgrade toolbox-testsUpgrade python3-podmanUpgrade criu-devel | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-raceUpgrade containerdUpgrade containerd-debuginfoUpgrade golangUpgrade golang-docsUpgrade golang-srcUpgrade golang-testsUpgrade golang-binUpgrade golang-miscUpgrade containerd-stress | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 11, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golangUpgrade golang-raceUpgrade golang-srcUpgrade golang-testsUpgrade golang-sharedUpgrade golang-docsUpgrade golang-bin | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade skopeo-debugsourceUpgrade delveUpgrade delve-debugsourceUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade libslirp-develUpgrade containernetworking-plugins-debugsourceUpgrade netavarkUpgrade podman-dockerUpgrade criu-libsUpgrade podman-pluginsUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade toolboxUpgrade buildah-debugsourceUpgrade criu-develUpgrade libslirpUpgrade conmon-debugsourceUpgrade cockpit-podmanUpgrade golang-raceUpgrade crunUpgrade skopeoUpgrade criuUpgrade crun-debuginfoUpgrade golang-miscUpgrade slirp4netnsUpgrade fuse-overlayfs-debuginfoUpgrade runc-debuginfoUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade conmonUpgrade golangUpgrade podman-catatonit-debuginfoUpgrade podman-testsUpgrade podman-plugins-debuginfoUpgrade golang-srcUpgrade golang-binUpgrade delve-debuginfoUpgrade containers-commonUpgrade podman-catatonitUpgrade go-toolsetUpgrade libslirp-debugsourceUpgrade toolbox-testsUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debuginfoUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-remote-debuginfoUpgrade runc-debugsourceUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debuginfoUpgrade toolbox-debugsourceUpgrade podman-debuginfoUpgrade podmanUpgrade libslirp-debuginfoUpgrade golang-docsUpgrade fuse-overlayfs-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-debugsourceUpgrade golang-testsUpgrade udicaUpgrade critUpgrade buildah-testsUpgrade buildah | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade podmanUpgrade podman-remoteUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade skopeo-testsUpgrade criu-develUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade criu-libsUpgrade skopeoUpgrade python3-criuUpgrade conmonUpgrade critUpgrade buildah-testsUpgrade aardvark-dnsUpgrade libslirpUpgrade udicaUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade netavarkUpgrade podman-catatonitUpgrade podman-testsUpgrade podman-dockerUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade criuUpgrade runcUpgrade buildahUpgrade python3-podmanUpgrade crun | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade podmanUpgrade skopeoUpgrade openshift-clientsUpgrade microshiftUpgrade cri-toolsUpgrade buildah | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade fuse-overlayfsUpgrade golang-raceUpgrade buildahUpgrade toolboxUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-podmanUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade crun-debugsourceUpgrade libslirpUpgrade podman-gvproxyUpgrade containers-commonUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade golang-miscUpgrade golang-srcUpgrade criu-debuginfoUpgrade crun-debuginfoUpgrade buildah-testsUpgrade runc-debuginfoUpgrade skopeoUpgrade golangUpgrade conmonUpgrade runc-debugsourceUpgrade libslirp-develUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade delve-debugsourceUpgrade buildah-tests-debuginfoUpgrade delve-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netnsUpgrade podman-catatonit-debuginfoUpgrade aardvark-dnsUpgrade go-toolsetUpgrade criu-develUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade skopeo-debuginfoUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade containernetworking-pluginsUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade buildah-debugsourceUpgrade conmon-debuginfoUpgrade udicaUpgrade delveUpgrade golang-binUpgrade podman-plugins-debuginfoUpgrade golang-docsUpgrade toolbox-debugsourceUpgrade podman-remoteUpgrade podman-catatonitUpgrade crunUpgrade critUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade libslirp-debugsourceUpgrade podman-dockerUpgrade python3-criuUpgrade slirp4netns-debugsourceUpgrade runcUpgrade golang-testsUpgrade podman-testsUpgrade criu-libs-debuginfoUpgrade container-selinuxNo solution existsUpgrade skopeo-testsUpgrade criuUpgrade libslirp-debuginfoUpgrade cockpit-podman | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade podman-debugsourceUpgrade runc-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade criu-libsUpgrade podman-gvproxyUpgrade criu-debugsourceUpgrade crun-debuginfoUpgrade slirp4netns-debuginfoUpgrade buildah-testsUpgrade buildahUpgrade buildah-debuginfoUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade libslirp-develUpgrade libslirpUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade python3-criuUpgrade aardvark-dnsUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade conmonUpgrade criu-debuginfoUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade podmanUpgrade runcUpgrade criuUpgrade critUpgrade podman-catatonitUpgrade criu-develUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade crun | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19Upgrade go1.20-raceUpgrade go1.20-docUpgrade go1.20Upgrade go1.19-raceUpgrade go1.19-doc | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19Upgrade golang-1.20-srcUpgrade golang-1.19-goUpgrade golang-1.19-srcUpgrade golang-1.20Upgrade golang-1.20-go | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub