Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-pluginsUpgrade conmonUpgrade netavarkUpgrade libslirpUpgrade podman-testsUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade criu-develUpgrade toolboxUpgrade skopeo-testsUpgrade podman-dockerUpgrade skopeoUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade crunUpgrade runcUpgrade critUpgrade udicaUpgrade criu-libsUpgrade libslirp-develUpgrade python3-criuUpgrade aardvark-dnsUpgrade container-selinuxUpgrade buildah-testsUpgrade buildahUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade containers-commonUpgrade criuUpgrade podman | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-raceUpgrade containerd-debuginfoUpgrade containerdUpgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-docsUpgrade containerd-stressUpgrade golang-miscUpgrade golang-bin | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 11, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-binUpgrade golang-sharedUpgrade golang-testsUpgrade golang-raceUpgrade golang-miscUpgrade golang-srcUpgrade golang | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade crun-debuginfoUpgrade golang-raceUpgrade golangUpgrade slirp4netnsUpgrade golang-miscUpgrade libslirpUpgrade crunUpgrade conmonUpgrade toolboxUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade buildah-debugsourceUpgrade criuUpgrade podman-pluginsUpgrade podman-testsUpgrade criu-libsUpgrade netavarkUpgrade podman-dockerUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade delveUpgrade skopeo-debugsourceUpgrade delve-debugsourceUpgrade skopeo-debuginfoUpgrade libslirp-develUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade python3-podmanUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade fuse-overlayfsUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade delve-debuginfoUpgrade buildahUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade podman-debugsourceUpgrade buildah-testsUpgrade podman-remote-debuginfoUpgrade critUpgrade udicaUpgrade toolbox-debugsourceUpgrade runcUpgrade podman-debuginfoUpgrade podmanUpgrade libslirp-debuginfoUpgrade golang-testsUpgrade golang-docsUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade golang-srcUpgrade containers-commonUpgrade golang-binUpgrade podman-plugins-debuginfoUpgrade go-toolset | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade buildahUpgrade netavarkUpgrade podman-catatonitUpgrade podman-testsUpgrade udicaUpgrade python3-criuUpgrade cockpit-podmanUpgrade libslirpUpgrade runcUpgrade buildah-testsUpgrade criuUpgrade crunUpgrade slirp4netnsUpgrade critUpgrade podman-gvproxyUpgrade conmonUpgrade podman-dockerUpgrade aardvark-dnsUpgrade python3-podmanUpgrade podmanUpgrade container-selinuxUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade criu-develUpgrade podman-pluginsUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade skopeo-testsUpgrade skopeo | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade skopeoUpgrade openshift-clientsUpgrade podmanUpgrade microshiftUpgrade buildahUpgrade cri-tools | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade delve-debugsourceUpgrade golangUpgrade libslirpUpgrade skopeo-debugsourceUpgrade criu-debugsourceUpgrade containers-commonUpgrade netavarkUpgrade golang-srcUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade crun-debuginfoUpgrade toolboxUpgrade golang-raceUpgrade delve-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade podman-remote-debuginfoUpgrade criu-libsUpgrade buildahUpgrade python3-podmanUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debugsourceUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade golang-miscUpgrade fuse-overlayfs-debugsourceUpgrade aardvark-dnsUpgrade criu-debuginfoUpgrade buildah-testsUpgrade runc-debuginfoUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade runc-debugsourceUpgrade libslirp-develUpgrade podman-remoteUpgrade skopeo-testsUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debuginfoUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade criu-develUpgrade critUpgrade skopeo-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade podmanUpgrade containernetworking-pluginsUpgrade golang-binUpgrade buildah-debugsourceUpgrade udicaUpgrade go-toolsetUpgrade podman-pluginsUpgrade criuUpgrade delveNo solution existsUpgrade criu-libs-debuginfoUpgrade golang-testsUpgrade runcUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade golang-docsUpgrade podman-catatonitUpgrade crunUpgrade toolbox-debugsourceUpgrade cockpit-podmanUpgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade podman-dockerUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade libslirp-debuginfo | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade libslirp-debuginfoUpgrade criu-develUpgrade runcUpgrade podman-remoteUpgrade fuse-overlayfs-debugsourceUpgrade conmonUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containers-commonUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade podman-catatonitUpgrade critUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade netavarkUpgrade buildah-tests-debuginfoUpgrade criu-libsUpgrade libslirpUpgrade podman-gvproxy-debuginfoUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade slirp4netns-debugsourceUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-testsUpgrade runc-debuginfoUpgrade podman-testsUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade conmon-debuginfoUpgrade buildahUpgrade aardvark-dnsUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-develUpgrade buildah-debuginfoUpgrade criu-debugsource | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19Upgrade go1.20-raceUpgrade go1.19-docUpgrade go1.20-docUpgrade go1.19-raceUpgrade go1.20 | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20Upgrade golang-1.20-goUpgrade golang-1.19-srcUpgrade golang-1.20-srcUpgrade golang-1.19-goUpgrade golang-1.19 | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub