The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "#!" comment tokens, in <script> contexts. This may cause the template parser to improperly interpret the contents of <script> contexts, causing actions to be improperly escaped. This may be leveraged to perform an XSS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fuse-overlayfsUpgrade python3-criuUpgrade netavarkUpgrade podmanUpgrade criuUpgrade containers-commonUpgrade podman-remoteUpgrade libslirp-develUpgrade buildahUpgrade criu-libsUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade criu-develUpgrade libslirpUpgrade podman-dockerUpgrade crunUpgrade skopeoUpgrade podman-catatonitUpgrade toolbox-testsUpgrade podman-pluginsUpgrade critUpgrade udicaUpgrade podman-testsUpgrade conmonUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade skopeo-testsUpgrade runcUpgrade toolboxUpgrade container-selinuxUpgrade python3-podman | Dec 19, 2023 | Sep 8, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Sep 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-sharedUpgrade golang-docsUpgrade golang-binUpgrade golang-srcUpgrade golang-miscUpgrade golang | Nov 1, 2023 | Sep 8, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-docsUpgrade golang-sharedUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-misc | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade skopeoUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade podmanUpgrade podman-gvproxy-debuginfoUpgrade conmon-debugsourceUpgrade critUpgrade fuse-overlayfsUpgrade netavarkUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade toolboxUpgrade criu-debugsourceUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade libslirp-develUpgrade crun-debugsourceUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criuUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonitUpgrade podman-remote-debuginfoUpgrade python3-criuUpgrade toolbox-testsUpgrade podman-testsUpgrade buildah-debuginfoUpgrade podman-debugsourceUpgrade python3-podmanUpgrade podman-dockerUpgrade criu-debuginfoUpgrade buildah-testsUpgrade conmonUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade toolbox-debuginfoUpgrade container-selinuxUpgrade runc-debugsourceUpgrade buildahUpgrade conmon-debuginfoUpgrade podman-gvproxyUpgrade libslirpUpgrade slirp4netns-debuginfoUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade podman-plugins-debuginfoUpgrade skopeo-debuginfoUpgrade udicaUpgrade skopeo-debugsourceUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debuginfo | Dec 13, 2023 | Sep 8, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Sep 8, 2023 |
| Freebsd | — | Upgrade go121Upgrade go120 | Sep 8, 2023 | Sep 7, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 10, 2024 | Sep 8, 2023 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade podman-gvproxyUpgrade libslirpUpgrade buildahUpgrade aardvark-dnsUpgrade python3-criuUpgrade cockpit-podmanUpgrade conmonUpgrade slirp4netnsUpgrade podman-testsUpgrade python3-podmanUpgrade container-selinuxUpgrade udicaUpgrade crunUpgrade buildah-testsUpgrade libslirp-develUpgrade skopeoUpgrade runcUpgrade criu-libsUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade netavarkUpgrade criuUpgrade criu-develUpgrade skopeo-testsUpgrade containers-commonUpgrade crit | Dec 14, 2023 | Sep 6, 2023 |
| Redhat Openshift | — | Upgrade runcUpgrade podmanUpgrade skopeoUpgrade containernetworking-pluginsUpgrade microshiftUpgrade openshift-clientsUpgrade buildah | Nov 1, 2023 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade criuUpgrade critUpgrade podman-gvproxy-debuginfoUpgrade crun-debuginfoUpgrade libslirp-debugsourceUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-testsUpgrade podman-catatonitUpgrade buildah-testsUpgrade fuse-overlayfs-debuginfoUpgrade python3-podmanNo solution existsUpgrade criu-develUpgrade conmonUpgrade fuse-overlayfsUpgrade podman-testsUpgrade conmon-debuginfoUpgrade skopeo-debugsourceUpgrade slirp4netns-debugsourceUpgrade crunUpgrade toolbox-debugsourceUpgrade runcUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade udicaUpgrade container-selinuxUpgrade slirp4netnsUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-dockerUpgrade podman-debugsourceUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade skopeo-testsUpgrade criu-libs-debuginfoUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade libslirp-debuginfoUpgrade buildah-debugsourceUpgrade podman-remoteUpgrade runc-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade netavarkUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade python3-criuUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade buildah-debuginfoUpgrade skopeoUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containers-commonUpgrade libslirp-develUpgrade podman-debuginfoUpgrade criu-libs | Dec 13, 2023 | Sep 8, 2023 |
| Rocky_linux | — | Upgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade libslirp-debuginfoUpgrade libslirp-develUpgrade runc-debuginfoUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade libslirp-debugsourceUpgrade critUpgrade skopeo-debuginfoUpgrade toolbox-debugsourceUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debuginfoUpgrade criu-libsUpgrade slirp4netnsUpgrade buildahUpgrade runc-debugsourceUpgrade python3-criuUpgrade slirp4netns-debuginfoUpgrade runcUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade conmon-debugsourceUpgrade conmonUpgrade fuse-overlayfsUpgrade crunUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade skopeo-debugsourceUpgrade criuUpgrade toolbox-testsUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade skopeo | May 8, 2025 | Sep 8, 2023 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Enterprise to version 9.3.1 | Jul 30, 2026 | Sep 8, 2023 |
| Suse | — | Upgrade go1.21-raceUpgrade go1.21-opensslUpgrade go1.20-opensslUpgrade go1.20-openssl-raceUpgrade go1.20-openssl-docUpgrade go1.20-docUpgrade go1.21-openssl-raceUpgrade go1.21Upgrade go1.21-docUpgrade go1.20-raceUpgrade go1.20Upgrade go1.21-openssl-doc | Sep 21, 2023 | Sep 8, 2023 |
| Ubuntu | — | Upgrade golang-1.18Upgrade golang-1.21-srcUpgrade golang-1.18-srcUpgrade golang-1.21-goUpgrade golang-1.21Upgrade golang-1.20-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.17-srcUpgrade golang-1.20Upgrade golang-1.18-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17-goUpgrade golang-1.20-srcUpgrade golang-1.18-src (Ubuntu Pro) | Jan 12, 2024 | Sep 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub