The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script" within JS literals in <script> contexts. This may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped. This could be leveraged to perform an XSS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containernetworking-pluginsUpgrade toolboxUpgrade podman-remoteUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade skopeo-testsUpgrade libslirp-develUpgrade critUpgrade containers-commonUpgrade podmanUpgrade criuUpgrade netavarkUpgrade criu-develUpgrade fuse-overlayfsUpgrade runcUpgrade podman-pluginsUpgrade podman-catatonitUpgrade container-selinuxUpgrade crunUpgrade python3-podmanUpgrade podman-gvproxyUpgrade buildah-testsUpgrade podman-testsUpgrade libslirpUpgrade cockpit-podmanUpgrade conmonUpgrade buildahUpgrade aardvark-dnsUpgrade podman-dockerUpgrade slirp4netnsUpgrade python3-criuUpgrade toolbox-testsUpgrade udica | Dec 19, 2023 | Sep 8, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Sep 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade golang-shared | Jan 9, 2024 | Sep 8, 2023 |
| Amazon_linux | — | Upgrade golang | Jan 9, 2024 | Sep 8, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-docsUpgrade golang-testsUpgrade golang-sharedUpgrade golangUpgrade golang-miscUpgrade golang-src | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade libslirpUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade podman-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade podman-debugsourceUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debugsourceUpgrade conmon-debuginfoUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade runc-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade slirp4netns-debugsourceUpgrade conmonUpgrade skopeo-testsUpgrade toolbox-debuginfoUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade skopeo-debuginfoUpgrade cockpit-podmanUpgrade crunUpgrade runc-debugsourceUpgrade containers-commonUpgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade container-selinuxUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade python3-podmanUpgrade buildah-testsUpgrade criu-debuginfoUpgrade aardvark-dnsUpgrade buildahUpgrade libslirp-debuginfoUpgrade fuse-overlayfsUpgrade criuUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildah-debugsourceUpgrade netavarkUpgrade podman-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade skopeoUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade udicaUpgrade toolbox-debugsourceUpgrade crun-debugsourceUpgrade toolbox-testsUpgrade podman-remoteUpgrade podman-dockerUpgrade toolboxUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade crit | Dec 13, 2023 | Sep 8, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Sep 8, 2023 |
| Freebsd | — | Upgrade go121Upgrade go120 | Sep 8, 2023 | Sep 7, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Sep 8, 2023 |
| Oracle_linux | — | Upgrade libslirp-develUpgrade containers-commonUpgrade cockpit-podmanUpgrade python3-podmanUpgrade container-selinuxUpgrade skopeo-testsUpgrade podman-testsUpgrade libslirpUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade criu-develUpgrade criu-libsUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade runcUpgrade skopeoUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade netavarkUpgrade udicaUpgrade critUpgrade buildah-testsUpgrade podman-catatonitUpgrade podman-remoteUpgrade podman-dockerUpgrade buildahUpgrade crunUpgrade podmanUpgrade python3-criuUpgrade criu | Dec 14, 2023 | Sep 6, 2023 |
| Redhat Openshift | — | Upgrade buildahUpgrade containernetworking-pluginsUpgrade openshift-clientsUpgrade skopeoUpgrade microshiftUpgrade podman | Nov 1, 2023 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade podman-catatonit-debuginfoUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-pluginsUpgrade runcNo solution existsUpgrade podman-catatonitUpgrade criu-debugsourceUpgrade toolbox-testsUpgrade podman-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-pluginsUpgrade libslirp-debuginfoUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade skopeoUpgrade criu-libs-debuginfoUpgrade critUpgrade criu-develUpgrade udicaUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-remoteUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade podman-remote-debuginfoUpgrade skopeo-debugsourceUpgrade containers-commonUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade criu-debuginfoUpgrade skopeo-debuginfoUpgrade toolbox-debuginfoUpgrade aardvark-dnsUpgrade libslirp-develUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade podman-dockerUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade conmonUpgrade criu-libsUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade slirp4netns-debugsourceUpgrade podman-plugins-debuginfoUpgrade python3-podmanUpgrade podman-testsUpgrade podman-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade crun-debuginfoUpgrade libslirpUpgrade buildah-tests-debuginfoUpgrade runc-debuginfoUpgrade buildah-testsUpgrade podman-gvproxyUpgrade container-selinuxUpgrade buildahUpgrade buildah-debuginfoUpgrade slirp4netns-debuginfoUpgrade crunUpgrade slirp4netns | Dec 13, 2023 | Sep 8, 2023 |
| Rocky_linux | — | Upgrade buildah-tests-debuginfoUpgrade toolbox-testsUpgrade conmon-debuginfoUpgrade libslirp-debugsourceUpgrade criu-debuginfoUpgrade buildahUpgrade crun-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade skopeo-debugsourceUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade python3-criuUpgrade runcUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade slirp4netns-debuginfoUpgrade toolbox-debuginfoUpgrade buildah-debuginfoUpgrade runc-debugsourceUpgrade critUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade crun-debugsourceUpgrade skopeo-debuginfoUpgrade libslirp-debuginfoUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-develUpgrade netavarkUpgrade containernetworking-plugins-debugsourceUpgrade criuUpgrade conmonUpgrade criu-develUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade toolboxUpgrade libslirpUpgrade runc-debuginfoUpgrade criu-libsUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade skopeoUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debugsource | May 8, 2025 | Sep 8, 2023 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Enterprise to version 9.2.3 | Jul 30, 2026 | Sep 8, 2023 |
| Suse | — | Upgrade go1.20-openssl-raceUpgrade go1.20-opensslUpgrade go1.21-openssl-docUpgrade go1.21Upgrade go1.20-raceUpgrade go1.21-openssl-raceUpgrade go1.20-openssl-docUpgrade go1.21-opensslUpgrade go1.21-docUpgrade go1.20-docUpgrade go1.20Upgrade go1.21-race | Sep 21, 2023 | Sep 8, 2023 |
| Ubuntu | — | Upgrade golang-1.18-srcUpgrade golang-1.21Upgrade golang-1.21-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.20-srcUpgrade golang-1.17-srcUpgrade golang-1.20-goUpgrade golang-1.21-srcUpgrade golang-1.20Upgrade golang-1.18Upgrade golang-1.17Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17-go | Jan 12, 2024 | Sep 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub