Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade container-selinuxUpgrade criu-libsUpgrade runcUpgrade python3-criuUpgrade udicaUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade critUpgrade libslirp-develUpgrade podmanUpgrade containers-commonUpgrade podman-catatonitUpgrade buildah-testsUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade buildahUpgrade aardvark-dnsUpgrade python3-podmanUpgrade criu-develUpgrade crunUpgrade podman-testsUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade skopeoUpgrade slirp4netnsUpgrade conmonUpgrade toolboxUpgrade netavarkUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade podman-dockerUpgrade skopeo-testsUpgrade libslirpUpgrade fuse-overlayfs | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerd-debuginfoUpgrade golang-sharedUpgrade golang-raceUpgrade containerdUpgrade golang-binUpgrade golang-miscUpgrade golang-testsUpgrade golang-srcUpgrade containerd-stressUpgrade golang-docsUpgrade golang | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 11, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golangUpgrade golang-raceUpgrade golang-srcUpgrade golang-testsUpgrade golang-docsUpgrade golang-sharedUpgrade golang-bin | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade delve-debuginfoUpgrade buildahUpgrade containers-commonUpgrade critUpgrade buildah-testsUpgrade podman-debugsourceUpgrade go-toolsetUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade golang-docsUpgrade golang-testsUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade crun-debugsourceUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade container-selinuxUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-catatonitUpgrade podman-plugins-debuginfoUpgrade golang-binUpgrade golang-srcUpgrade runcUpgrade toolbox-debugsourceUpgrade udicaUpgrade slirp4netns-debuginfoUpgrade podmanUpgrade podman-debuginfoUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debugsourceUpgrade delveUpgrade podman-testsUpgrade podman-pluginsUpgrade criu-libsUpgrade podman-dockerUpgrade netavarkUpgrade buildah-tests-debuginfoUpgrade conmonUpgrade slirp4netnsUpgrade golang-raceUpgrade golangUpgrade crun-debuginfoUpgrade skopeo-debuginfoUpgrade libslirp-develUpgrade delve-debugsourceUpgrade skopeo-debugsourceUpgrade criu-develUpgrade conmon-debugsourceUpgrade cockpit-podmanUpgrade libslirpUpgrade golang-miscUpgrade crunUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade toolboxUpgrade criu-debuginfoUpgrade python3-podmanUpgrade runc-debuginfoUpgrade fuse-overlayfsUpgrade podman-catatonit-debuginfoUpgrade criu | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade cockpit-podmanUpgrade podman-testsUpgrade conmonUpgrade runcUpgrade udicaUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade crunUpgrade slirp4netnsUpgrade buildahUpgrade criuUpgrade python3-criuUpgrade buildah-testsUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade netavarkUpgrade libslirpUpgrade critUpgrade podman-dockerUpgrade podman-gvproxyUpgrade criu-libsUpgrade criu-develUpgrade podmanUpgrade container-selinuxUpgrade skopeo-testsUpgrade skopeoUpgrade podman-remoteUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade containers-common | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade microshiftUpgrade skopeoUpgrade podmanUpgrade buildahUpgrade cri-tools | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade buildahUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-miscUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade python3-podmanUpgrade podman-gvproxyUpgrade crun-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade buildah-debuginfoUpgrade golang-srcUpgrade slirp4netnsUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade libslirp-develUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade conmonUpgrade netavarkUpgrade aardvark-dnsUpgrade golang-raceUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade crun-debuginfoUpgrade fuse-overlayfsUpgrade libslirpUpgrade skopeo-debugsourceUpgrade runc-debuginfoUpgrade criu-libsUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade runc-debugsourceUpgrade golangUpgrade runcUpgrade criu-libs-debuginfoUpgrade container-selinuxUpgrade golang-testsUpgrade podman-dockerUpgrade libslirp-debugsourceNo solution existsUpgrade podman-testsUpgrade podman-catatonitUpgrade toolbox-testsUpgrade skopeo-debuginfoUpgrade podman-debuginfoUpgrade crunUpgrade golang-docsUpgrade toolbox-debugsourceUpgrade golang-binUpgrade conmon-debuginfoUpgrade slirp4netns-debuginfoUpgrade buildah-debugsourceUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade slirp4netns-debugsourceUpgrade critUpgrade delveUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade criuUpgrade udicaUpgrade python3-criuUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-pluginsUpgrade go-toolsetUpgrade cockpit-podmanUpgrade libslirp-debuginfoUpgrade skopeo-testsUpgrade podman-plugins | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-testsUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade criu-libsUpgrade runc-debuginfoUpgrade buildahUpgrade python3-criuUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade libslirpUpgrade podman-testsUpgrade libslirp-develUpgrade libslirp-debugsourceUpgrade aardvark-dnsUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-remote-debuginfoUpgrade conmonUpgrade podman-pluginsUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade crunUpgrade criu-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade netavarkUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade libslirp-debuginfoUpgrade containers-commonUpgrade runcUpgrade criu-develUpgrade podman-catatonitUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debugsource | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19-raceUpgrade go1.20-docUpgrade go1.19-docUpgrade go1.20Upgrade go1.20-raceUpgrade go1.19 | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20-srcUpgrade golang-1.19-goUpgrade golang-1.19Upgrade golang-1.19-srcUpgrade golang-1.20Upgrade golang-1.20-go | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub