The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "#!" comment tokens, in <script> contexts. This may cause the template parser to improperly interpret the contents of <script> contexts, causing actions to be improperly escaped. This may be leveraged to perform an XSS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criuUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade buildahUpgrade python3-criuUpgrade buildah-testsUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade podmanUpgrade podman-remoteUpgrade netavarkUpgrade criu-libsUpgrade fuse-overlayfsUpgrade containers-commonUpgrade critUpgrade podman-testsUpgrade toolboxUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade podman-catatonitUpgrade conmonUpgrade python3-podmanUpgrade podman-dockerUpgrade runcUpgrade container-selinuxUpgrade udicaUpgrade skopeoUpgrade podman-gvproxyUpgrade crunUpgrade podman-pluginsUpgrade criu-develUpgrade libslirpUpgrade skopeo-testsUpgrade slirp4netns | Dec 19, 2023 | Sep 8, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Sep 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade golang-shared | Nov 1, 2023 | Sep 8, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-sharedUpgrade golang-binUpgrade golang-testsUpgrade golang-docs | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade buildah-testsUpgrade crun-debuginfoUpgrade udicaUpgrade skopeo-debuginfoUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debugsourceUpgrade crunUpgrade aardvark-dnsUpgrade podman-dockerUpgrade criu-debuginfoUpgrade python3-podmanUpgrade toolbox-testsUpgrade libslirpUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade runc-debugsourceUpgrade buildahUpgrade container-selinuxUpgrade conmonUpgrade toolbox-debuginfoUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade fuse-overlayfsUpgrade criuUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade skopeoUpgrade critUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade toolboxUpgrade netavarkUpgrade criu-libsUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade libslirp-develUpgrade criu-develUpgrade buildah-tests-debuginfoUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade buildah-debugsourceUpgrade containers-common | Dec 13, 2023 | Sep 8, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Sep 8, 2023 |
| Freebsd | — | Upgrade go121Upgrade go120 | Sep 8, 2023 | Sep 7, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jan 10, 2024 | Sep 8, 2023 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade podman-gvproxyUpgrade libslirpUpgrade buildahUpgrade podman-testsUpgrade container-selinuxUpgrade udicaUpgrade aardvark-dnsUpgrade buildah-testsUpgrade crunUpgrade python3-criuUpgrade cockpit-podmanUpgrade conmonUpgrade python3-podmanUpgrade slirp4netnsUpgrade criu-develUpgrade criuUpgrade containers-commonUpgrade netavarkUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade criu-libsUpgrade skopeoUpgrade podman-remoteUpgrade critUpgrade fuse-overlayfsUpgrade skopeo-testsUpgrade runcUpgrade podman-pluginsUpgrade podman-catatonit | Dec 14, 2023 | Sep 6, 2023 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade buildahUpgrade microshiftUpgrade podmanUpgrade containernetworking-pluginsUpgrade skopeoUpgrade runc | Nov 1, 2023 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade toolboxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonitUpgrade toolbox-testsUpgrade libslirp-debugsourceUpgrade criuUpgrade container-selinuxUpgrade conmonUpgrade slirp4netns-debuginfoUpgrade conmon-debuginfoNo solution existsUpgrade toolbox-debugsourceUpgrade slirp4netns-debugsourceUpgrade crunUpgrade python3-podmanUpgrade podman-dockerUpgrade toolbox-debuginfoUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-develUpgrade libslirpUpgrade podman-gvproxy-debuginfoUpgrade crun-debuginfoUpgrade buildah-testsUpgrade critUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade runcUpgrade cockpit-podmanUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade udicaUpgrade podman-pluginsUpgrade fuse-overlayfsUpgrade python3-criuUpgrade criu-debuginfoUpgrade libslirp-develUpgrade conmon-debugsourceUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade criu-libsUpgrade aardvark-dnsUpgrade podman-remote-debuginfoUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade runc-debuginfoUpgrade libslirp-debuginfoUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade netavarkUpgrade podman-debuginfoUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade buildah-debugsourceUpgrade containers-commonUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah | Dec 13, 2023 | Sep 8, 2023 |
| Rocky_linux | — | Upgrade criu-develUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade criu-libs-debuginfoUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade toolbox-debuginfoUpgrade crun-debuginfoUpgrade libslirp-debuginfoUpgrade libslirp-develUpgrade toolbox-debugsourceUpgrade critUpgrade python3-criuUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade buildah-testsUpgrade slirp4netns-debuginfoUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcUpgrade skopeo-testsUpgrade buildahUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade containers-commonUpgrade skopeo-debugsourceUpgrade criuUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade buildah-debugsourceUpgrade crunUpgrade fuse-overlayfsUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade skopeoUpgrade criu-debuginfoUpgrade netavarkUpgrade buildah-tests-debuginfoUpgrade toolbox-tests | May 8, 2025 | Sep 8, 2023 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Enterprise to version 9.2.3 | Jul 30, 2026 | Sep 8, 2023 |
| Suse | — | Upgrade go1.21-raceUpgrade go1.21-opensslUpgrade go1.20-opensslUpgrade go1.20-openssl-raceUpgrade go1.21-docUpgrade go1.20-raceUpgrade go1.21-openssl-docUpgrade go1.20-openssl-docUpgrade go1.21-openssl-raceUpgrade go1.21Upgrade go1.20-docUpgrade go1.20 | Sep 21, 2023 | Sep 8, 2023 |
| Ubuntu | — | Upgrade golang-1.20-srcUpgrade golang-1.17Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.20Upgrade golang-1.17-goUpgrade golang-1.17-srcUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.21-srcUpgrade golang-1.20-goUpgrade golang-1.18-srcUpgrade golang-1.18Upgrade golang-1.21-goUpgrade golang-1.21 | Jan 12, 2024 | Sep 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub