Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-podmanUpgrade cockpit-podmanUpgrade criu-develUpgrade podman-pluginsUpgrade podman-dockerUpgrade crunUpgrade skopeo-testsUpgrade libslirpUpgrade toolboxUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade skopeoUpgrade netavarkUpgrade conmonUpgrade toolbox-testsUpgrade podman-testsUpgrade fuse-overlayfsUpgrade criuUpgrade container-selinuxUpgrade buildah-testsUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade libslirp-develUpgrade critUpgrade podman-catatonitUpgrade containers-commonUpgrade runcUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade python3-criuUpgrade udicaUpgrade aardvark-dnsUpgrade podman | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade golang-raceUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade golang-srcUpgrade golang-testsUpgrade containerd-stressUpgrade golangUpgrade golang-miscUpgrade golang-binUpgrade golang-docs | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 11, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-sharedUpgrade golang-docsUpgrade golang-testsUpgrade golang-raceUpgrade golang-miscUpgrade golang-srcUpgrade golang | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade skopeoUpgrade libslirp-develUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade delveUpgrade delve-debugsourceUpgrade libslirpUpgrade slirp4netnsUpgrade golang-miscUpgrade conmonUpgrade cockpit-podmanUpgrade criu-develUpgrade crunUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade criuUpgrade python3-podmanUpgrade podman-testsUpgrade podman-pluginsUpgrade skopeo-testsUpgrade buildah-debugsourceUpgrade golangUpgrade podman-dockerUpgrade buildah-tests-debuginfoUpgrade netavarkUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade podman-catatonit-debuginfoUpgrade criu-libsUpgrade podman-gvproxyUpgrade conmon-debugsourceUpgrade toolboxUpgrade golang-raceUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade conmon-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade libslirp-debuginfoUpgrade golang-testsUpgrade golang-docsUpgrade fuse-overlayfs-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-debugsourceUpgrade buildah-testsUpgrade podman-remote-debuginfoUpgrade slirp4netns-debuginfoUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade container-selinuxUpgrade aardvark-dnsUpgrade toolbox-debugsourceUpgrade runcUpgrade udicaUpgrade buildah-debuginfoUpgrade podman-debuginfoUpgrade criu-debugsourceUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade go-toolsetUpgrade containers-commonUpgrade podman-catatonitUpgrade golang-srcUpgrade golang-binUpgrade delve-debuginfoUpgrade buildahUpgrade critUpgrade podman-plugins-debuginfo | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade skopeoUpgrade skopeo-testsUpgrade containers-commonUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade libslirp-develUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade podmanUpgrade criu-libsUpgrade container-selinuxUpgrade conmonUpgrade podman-gvproxyUpgrade podman-dockerUpgrade slirp4netnsUpgrade python3-podmanUpgrade aardvark-dnsUpgrade critUpgrade podman-catatonitUpgrade buildahUpgrade crunUpgrade buildah-testsUpgrade udicaUpgrade libslirpUpgrade cockpit-podmanUpgrade runcUpgrade criuUpgrade fuse-overlayfsUpgrade netavarkUpgrade python3-criuUpgrade podman-tests | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade buildahUpgrade cri-toolsUpgrade microshiftUpgrade openshift-clientsUpgrade podmanUpgrade skopeo | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade python3-criuUpgrade golang-docsUpgrade podman-plugins-debuginfoUpgrade criu-develUpgrade podman-remoteUpgrade podman-debuginfoUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade podman-pluginsNo solution existsUpgrade golang-testsUpgrade delveUpgrade slirp4netns-debugsourceUpgrade podman-catatonitUpgrade runcUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade critUpgrade conmon-debuginfoUpgrade criuUpgrade toolbox-debugsourceUpgrade golang-binUpgrade skopeo-debuginfoUpgrade toolbox-debuginfoUpgrade podman-dockerUpgrade udicaUpgrade criu-libs-debuginfoUpgrade podman-testsUpgrade podmanUpgrade container-selinuxUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade cockpit-podmanUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-testsUpgrade libslirp-debuginfoUpgrade go-toolsetUpgrade toolboxUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debuginfoUpgrade golang-raceUpgrade criu-libsUpgrade buildah-tests-debuginfoUpgrade aardvark-dnsUpgrade buildah-testsUpgrade skopeoUpgrade containers-commonUpgrade libslirpUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade podman-remote-debuginfoUpgrade criu-debuginfoUpgrade golangUpgrade criu-debugsourceUpgrade golang-srcUpgrade podman-gvproxyUpgrade netavarkUpgrade conmonUpgrade crun-debugsourceUpgrade buildahUpgrade conmon-debugsourceUpgrade golang-miscUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade python3-podmanUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade delve-debugsourceUpgrade delve-debuginfo | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade criu-libsUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-develUpgrade buildah-debuginfoUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade buildah-testsUpgrade podman-gvproxyUpgrade libslirpUpgrade podman-gvproxy-debuginfoUpgrade slirp4netnsUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade runc-debuginfoUpgrade python3-criuUpgrade buildahUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade podman-remoteUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade critUpgrade criu-develUpgrade podman-catatonitUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade runcUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade crunUpgrade buildah-tests-debuginfoUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade conmonUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade podman-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.20-docUpgrade go1.20Upgrade go1.19-raceUpgrade go1.19-docUpgrade go1.19Upgrade go1.20-race | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20Upgrade golang-1.20-goUpgrade golang-1.19-srcUpgrade golang-1.19-goUpgrade golang-1.20-srcUpgrade golang-1.19 | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub