Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-gvproxyUpgrade slirp4netnsUpgrade toolboxUpgrade crunUpgrade fuse-overlayfsUpgrade skopeoUpgrade skopeo-testsUpgrade netavarkUpgrade podman-dockerUpgrade conmonUpgrade python3-podmanUpgrade libslirpUpgrade podman-testsUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade criu-develUpgrade toolbox-testsUpgrade criuUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade criu-libsUpgrade libslirp-develUpgrade aardvark-dnsUpgrade container-selinuxUpgrade buildah-testsUpgrade udicaUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade podman-catatonitUpgrade containers-commonUpgrade critUpgrade runcUpgrade python3-criu | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerd-stressUpgrade golang-docsUpgrade golang-srcUpgrade golang-binUpgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade containerdUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade golang-race | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 11, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-binUpgrade golang-sharedUpgrade golang-testsUpgrade golangUpgrade golang-raceUpgrade golang-miscUpgrade golang-src | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade skopeoUpgrade criu-libsUpgrade skopeo-debuginfoUpgrade toolboxUpgrade skopeo-debugsourceUpgrade criu-develUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsourceUpgrade podman-dockerUpgrade golang-miscUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade golang-raceUpgrade conmon-debugsourceUpgrade delveUpgrade criuUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade podman-testsUpgrade netavarkUpgrade libslirpUpgrade golangUpgrade conmonUpgrade buildah-tests-debuginfoUpgrade crunUpgrade crun-debuginfoUpgrade delve-debugsourceUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade python3-podmanUpgrade podman-remoteUpgrade criu-libs-debuginfoUpgrade runcUpgrade podmanUpgrade udicaUpgrade libslirp-debuginfoUpgrade golang-testsUpgrade toolbox-debugsourceUpgrade podman-debuginfoUpgrade golang-docsUpgrade podman-catatonitUpgrade golang-srcUpgrade golang-binUpgrade delve-debuginfoUpgrade podman-debugsourceUpgrade buildah-testsUpgrade podman-remote-debuginfoUpgrade go-toolsetUpgrade containers-commonUpgrade podman-plugins-debuginfoUpgrade buildahUpgrade runc-debugsourceUpgrade critUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade conmon-debuginfoUpgrade python3-criuUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debugsource | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade criu-develUpgrade containers-commonUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade skopeo-testsUpgrade container-selinuxUpgrade podmanUpgrade skopeoUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade libslirpUpgrade podman-gvproxyUpgrade podman-dockerUpgrade crunUpgrade python3-podmanUpgrade buildahUpgrade conmonUpgrade buildah-testsUpgrade slirp4netnsUpgrade udicaUpgrade podman-testsUpgrade python3-criuUpgrade fuse-overlayfsUpgrade netavarkUpgrade aardvark-dnsUpgrade critUpgrade runcUpgrade criu | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade microshiftUpgrade podmanUpgrade skopeoUpgrade openshift-clientsUpgrade cri-toolsUpgrade buildah | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade podman-gvproxyUpgrade slirp4netnsUpgrade golang-miscUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debugsourceUpgrade toolboxUpgrade criu-debugsourceUpgrade libslirp-develUpgrade golang-raceUpgrade golangUpgrade runc-debuginfoUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade python3-podmanUpgrade criu-libsUpgrade delve-debugsourceUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade netavarkUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade conmonUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade crun-debugsourceUpgrade buildahUpgrade golang-srcUpgrade fuse-overlayfs-debuginfoUpgrade aardvark-dnsUpgrade podman-catatonit-debuginfoUpgrade buildah-tests-debuginfoUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade fuse-overlayfsUpgrade libslirpUpgrade containers-commonUpgrade buildah-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-dockerUpgrade runcUpgrade criuUpgrade delveUpgrade golang-docsUpgrade podman-catatonitUpgrade libslirp-debugsourceUpgrade toolbox-debugsourceUpgrade crunUpgrade cockpit-podmanUpgrade libslirp-debuginfoUpgrade skopeo-testsUpgrade criu-libs-debuginfoUpgrade podman-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade conmon-debuginfoUpgrade toolbox-testsUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-pluginsUpgrade go-toolsetUpgrade podmanUpgrade podman-remoteUpgrade skopeo-debuginfoUpgrade slirp4netns-debugsourceUpgrade udicaUpgrade golang-binUpgrade podman-pluginsUpgrade golang-testsUpgrade critUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoNo solution existsUpgrade buildah-debugsourceUpgrade criu-develUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade python3-criu | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade buildahUpgrade libslirp-debugsourceUpgrade conmon-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade python3-criuUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade libslirp-develUpgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade containernetworking-plugins-debuginfoUpgrade libslirpUpgrade criu-debugsourceUpgrade criu-libsUpgrade podman-testsUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-develUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade critUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade podman-pluginsUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade crunUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19Upgrade go1.20-raceUpgrade go1.20-docUpgrade go1.20Upgrade go1.19-docUpgrade go1.19-race | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19-srcUpgrade golang-1.19Upgrade golang-1.20-srcUpgrade golang-1.19-goUpgrade golang-1.20Upgrade golang-1.20-go | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub