The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "#!" comment tokens, in <script> contexts. This may cause the template parser to improperly interpret the contents of <script> contexts, causing actions to be improperly escaped. This may be leveraged to perform an XSS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podmanUpgrade criu-libsUpgrade netavarkUpgrade aardvark-dnsUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade containers-commonUpgrade buildahUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade criuUpgrade toolboxUpgrade podman-testsUpgrade python3-podmanUpgrade udicaUpgrade podman-catatonitUpgrade conmonUpgrade runcUpgrade crunUpgrade critUpgrade podman-gvproxyUpgrade podman-dockerUpgrade toolbox-testsUpgrade criu-develUpgrade cockpit-podmanUpgrade libslirpUpgrade skopeo-testsUpgrade slirp4netnsUpgrade container-selinuxUpgrade podman-pluginsUpgrade skopeo | Dec 19, 2023 | Sep 8, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Sep 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-sharedUpgrade golang-docsUpgrade golang-testsUpgrade golang-bin | Nov 1, 2023 | Sep 8, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade golangUpgrade golang-miscUpgrade golang-src | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade toolbox-debuginfoUpgrade libslirpUpgrade conmon-debuginfoUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade runc-debugsourceUpgrade conmonUpgrade container-selinuxUpgrade buildahUpgrade python3-criuUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade criu-debuginfoUpgrade podman-dockerUpgrade python3-podmanUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debugsourceUpgrade crun-debuginfoUpgrade udicaUpgrade skopeo-debuginfoUpgrade aardvark-dnsUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade podman-debugsourceUpgrade fuse-overlayfsUpgrade criu-libsUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade netavarkUpgrade critUpgrade conmon-debugsourceUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade criuUpgrade buildah-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade criu-libs-debuginfoUpgrade criu-debugsourceUpgrade skopeoUpgrade containers-commonUpgrade toolboxUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade libslirp-develUpgrade buildah-tests-debuginfo | Dec 13, 2023 | Sep 8, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Sep 8, 2023 |
| Freebsd | — | Upgrade go121Upgrade go120 | Sep 8, 2023 | Sep 7, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Sep 8, 2023 |
| Oracle_linux | — | Upgrade containernetworking-pluginsUpgrade criu-develUpgrade netavarkUpgrade skopeo-testsUpgrade podman-catatonitUpgrade podman-remoteUpgrade skopeoUpgrade criuUpgrade criu-libsUpgrade podman-pluginsUpgrade podmanUpgrade runcUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade critUpgrade container-selinuxUpgrade buildah-testsUpgrade python3-podmanUpgrade libslirpUpgrade udicaUpgrade crunUpgrade conmonUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade podman-testsUpgrade slirp4netnsUpgrade buildahUpgrade podman-dockerUpgrade python3-criuUpgrade podman-gvproxy | Dec 14, 2023 | Sep 6, 2023 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade buildahUpgrade podmanUpgrade microshiftUpgrade runcUpgrade skopeoUpgrade containernetworking-plugins | Nov 1, 2023 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade conmon-debuginfoUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade runcUpgrade toolbox-debugsourceUpgrade podman-dockerUpgrade cockpit-podmanUpgrade podman-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade udicaUpgrade crunUpgrade container-selinuxUpgrade python3-podmanUpgrade podman-debugsourceUpgrade criu-libs-debuginfoUpgrade conmonUpgrade containernetworking-plugins-debuginfoNo solution existsUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade critUpgrade podman-gvproxy-debuginfoUpgrade skopeo-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-develUpgrade fuse-overlayfs-debuginfoUpgrade libslirpUpgrade podman-pluginsUpgrade criuUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade libslirp-debugsourceUpgrade toolboxUpgrade toolbox-testsUpgrade podman-testsUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade criu-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade podman-remoteUpgrade podman-debuginfoUpgrade buildah-tests-debuginfoUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade crun-debugsourceUpgrade buildah-debuginfoUpgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade netavarkUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildahUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade criu-libsUpgrade buildah-debugsourceUpgrade python3-criuUpgrade runc-debuginfoUpgrade skopeoUpgrade containers-common | Dec 13, 2023 | Sep 8, 2023 |
| Rocky_linux | — | Upgrade criu-libsUpgrade criu-debugsourceUpgrade skopeo-testsUpgrade aardvark-dnsUpgrade toolbox-debuginfoUpgrade buildahUpgrade toolbox-debugsourceUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade criu-develUpgrade runc-debuginfoUpgrade critUpgrade skopeo-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade libslirp-debuginfoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debuginfoUpgrade python3-criuUpgrade buildah-testsUpgrade slirp4netns-debugsourceUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade crunUpgrade buildah-debuginfoUpgrade containers-commonUpgrade conmon-debugsourceUpgrade conmonUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debugsourceUpgrade toolbox-testsUpgrade toolbox | May 8, 2025 | Sep 8, 2023 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.1.6 | Jul 30, 2026 | Sep 8, 2023 |
| Suse | — | Upgrade go1.21-docUpgrade go1.20-openssl-docUpgrade go1.20-raceUpgrade go1.21-openssl-raceUpgrade go1.21Upgrade go1.21-openssl-docUpgrade go1.20-docUpgrade go1.20Upgrade go1.20-openssl-raceUpgrade go1.21-opensslUpgrade go1.21-raceUpgrade go1.20-openssl | Sep 21, 2023 | Sep 8, 2023 |
| Ubuntu | — | Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.20Upgrade golang-1.18-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.17-goUpgrade golang-1.20-srcUpgrade golang-1.17-srcUpgrade golang-1.18-srcUpgrade golang-1.18Upgrade golang-1.21Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.20-goUpgrade golang-1.21-goUpgrade golang-1.21-src | Jan 12, 2024 | Sep 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub