Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade libslirp-develUpgrade buildahUpgrade podmanUpgrade aardvark-dnsUpgrade python3-criuUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade containers-commonUpgrade podman-catatonitUpgrade buildah-testsUpgrade runcUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade udicaUpgrade podman-remoteUpgrade libslirpUpgrade python3-podmanUpgrade crunUpgrade conmonUpgrade toolboxUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade skopeoUpgrade toolbox-testsUpgrade podman-dockerUpgrade podman-gvproxyUpgrade criu-develUpgrade podman-testsUpgrade netavarkUpgrade slirp4netnsUpgrade fuse-overlayfs | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-docsUpgrade golang-binUpgrade golang-miscUpgrade containerd-stressUpgrade containerdUpgrade golang-raceUpgrade containerd-debuginfoUpgrade golang-shared | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 11, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golang-raceUpgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade golang-sharedUpgrade golang-docsUpgrade golang-bin | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade crun-debuginfoUpgrade golangUpgrade conmonUpgrade golang-raceUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade toolboxUpgrade slirp4netnsUpgrade delve-debugsourceUpgrade libslirp-develUpgrade delveUpgrade skopeo-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade podman-testsUpgrade criu-libsUpgrade skopeoUpgrade crunUpgrade netavarkUpgrade conmon-debugsourceUpgrade golang-miscUpgrade skopeo-testsUpgrade libslirpUpgrade python3-podmanUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade cockpit-podmanUpgrade skopeo-debugsourceUpgrade criu-debugsourceUpgrade podman-debugsourceUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade golang-srcUpgrade golang-binUpgrade delve-debuginfoUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debuginfoUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade buildah-testsUpgrade critUpgrade toolbox-debugsourceUpgrade udicaUpgrade runcUpgrade podman-debuginfoUpgrade podmanUpgrade libslirp-debuginfoUpgrade golang-testsUpgrade golang-docsUpgrade fuse-overlayfs-debugsourceUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade go-toolsetUpgrade containers-commonUpgrade buildahUpgrade podman-plugins-debuginfoUpgrade podman-catatonit | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade skopeoUpgrade podmanUpgrade skopeo-testsUpgrade container-selinuxUpgrade criu-develUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade podman-remoteUpgrade criu-libsUpgrade podman-pluginsUpgrade criuUpgrade cockpit-podmanUpgrade runcUpgrade critUpgrade conmonUpgrade aardvark-dnsUpgrade python3-criuUpgrade podman-gvproxyUpgrade podman-dockerUpgrade libslirpUpgrade python3-podmanUpgrade crunUpgrade buildah-testsUpgrade buildahUpgrade udicaUpgrade slirp4netnsUpgrade podman-catatonitUpgrade podman-testsUpgrade fuse-overlayfsUpgrade netavark | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade buildahUpgrade podmanUpgrade skopeoUpgrade openshift-clientsUpgrade microshift | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade delveUpgrade toolbox-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-testsUpgrade container-selinuxUpgrade podman-gvproxy-debuginfoUpgrade podman-dockerUpgrade slirp4netns-debugsourceUpgrade golang-binUpgrade podman-testsUpgrade podman-debuginfoUpgrade crunUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade libslirp-debugsourceUpgrade udicaUpgrade skopeo-testsUpgrade criuUpgrade libslirp-debuginfoNo solution existsUpgrade podman-debugsourceUpgrade cockpit-podmanUpgrade criu-libs-debuginfoUpgrade golang-docsUpgrade critUpgrade podman-remoteUpgrade buildah-debugsourceUpgrade criu-develUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade conmon-debuginfoUpgrade skopeo-debuginfoUpgrade go-toolsetUpgrade toolbox-testsUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade runcUpgrade python3-criuUpgrade conmonUpgrade libslirp-develUpgrade skopeoUpgrade buildahUpgrade netavarkUpgrade runc-debuginfoUpgrade golangUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade crun-debuginfoUpgrade criu-libsUpgrade toolboxUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirpUpgrade fuse-overlayfsUpgrade golang-miscUpgrade conmon-debugsourceUpgrade containers-commonUpgrade golang-srcUpgrade skopeo-debugsourceUpgrade crun-debugsourceUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade python3-podmanUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade delve-debugsourceUpgrade delve-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-testsUpgrade aardvark-dns | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade criu-develUpgrade slirp4netns-debugsourceUpgrade criu-libsUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade podman-catatonitUpgrade libslirp-develUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade aardvark-dnsUpgrade podman-plugins-debuginfoUpgrade buildah-testsUpgrade podman-gvproxy-debuginfoUpgrade conmon-debuginfoUpgrade libslirp-debugsourceUpgrade buildahUpgrade runc-debuginfoUpgrade python3-criuUpgrade podman-testsUpgrade podman-gvproxyUpgrade critUpgrade conmon-debugsourceUpgrade libslirpUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoUpgrade podman-debuginfoUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade conmonUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19-raceUpgrade go1.20-docUpgrade go1.20Upgrade go1.19-docUpgrade go1.19Upgrade go1.20-race | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19-srcUpgrade golang-1.19-goUpgrade golang-1.19Upgrade golang-1.20-srcUpgrade golang-1.20-goUpgrade golang-1.20 | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub