The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script" within JS literals in <script> contexts. This may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped. This could be leveraged to perform an XSS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade criu-libsUpgrade fuse-overlayfsUpgrade criuUpgrade libslirp-develUpgrade netavarkUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade criu-develUpgrade runcUpgrade podmanUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade skopeoUpgrade toolboxUpgrade podman-remoteUpgrade libslirpUpgrade crunUpgrade toolbox-testsUpgrade podman-testsUpgrade conmonUpgrade python3-criuUpgrade python3-podmanUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade podman-dockerUpgrade cockpit-podmanUpgrade udicaUpgrade container-selinuxUpgrade podman-gvproxyUpgrade buildah-testsUpgrade buildah | Dec 19, 2023 | Sep 8, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Sep 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-binUpgrade golang-docsUpgrade golang-testsUpgrade golang-shared | Jan 9, 2024 | Sep 8, 2023 |
| Amazon_linux | — | Upgrade golang | Jan 9, 2024 | Sep 8, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-sharedUpgrade golang-binUpgrade golang-testsUpgrade golang-docs | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade buildah-tests-debuginfoUpgrade netavarkUpgrade podmanUpgrade conmon-debugsourceUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade udicaUpgrade libslirp-debuginfoUpgrade buildahUpgrade buildah-testsUpgrade critUpgrade criu-libs-debuginfoUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade toolbox-debugsourceUpgrade podman-remoteUpgrade toolbox-testsUpgrade podman-dockerUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade criu-debuginfoUpgrade crun-debugsourceUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade python3-podmanUpgrade podman-debuginfoUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade criuUpgrade skopeo-debugsourceUpgrade container-selinuxUpgrade conmonUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-testsUpgrade skopeo-debuginfoUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade cockpit-podmanUpgrade crun-debuginfoUpgrade libslirpUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade runc-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libsUpgrade conmon-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade toolbox-debuginfoUpgrade crunUpgrade runc-debugsourceUpgrade podman-plugins | Dec 13, 2023 | Sep 8, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Sep 8, 2023 |
| Freebsd | — | Upgrade go121Upgrade go120 | Sep 8, 2023 | Sep 7, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 10, 2024 | Sep 8, 2023 |
| Oracle_linux | — | Upgrade runcUpgrade podman-catatonitUpgrade podmanUpgrade netavarkUpgrade podman-dockerUpgrade criuUpgrade buildahUpgrade skopeoUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade crunUpgrade podman-remoteUpgrade udicaUpgrade buildah-testsUpgrade critUpgrade podman-pluginsUpgrade criu-develUpgrade criu-libsUpgrade aardvark-dnsUpgrade libslirpUpgrade conmonUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade python3-podmanUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade libslirp-develUpgrade slirp4netnsUpgrade containers-commonUpgrade container-selinux | Dec 14, 2023 | Sep 6, 2023 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade microshiftUpgrade podmanUpgrade skopeoUpgrade containernetworking-pluginsUpgrade buildah | Nov 1, 2023 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade slirp4netnsUpgrade crunUpgrade container-selinuxUpgrade python3-podmanUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-testsUpgrade podman-dockerUpgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade buildah-testsUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade buildahUpgrade libslirpUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade toolbox-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade libslirp-develUpgrade cockpit-podmanUpgrade conmon-debuginfoUpgrade python3-criuUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade udicaUpgrade criu-libs-debuginfoUpgrade fuse-overlayfsUpgrade podman-debuginfoUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonit-debuginfoUpgrade skopeo-debugsourceUpgrade criu-debugsourceUpgrade runcUpgrade podman-remote-debuginfoUpgrade podman-catatonitNo solution existsUpgrade podman-remoteUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade toolboxUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-pluginsUpgrade podmanUpgrade criu-develUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade skopeoUpgrade containers-commonUpgrade toolbox-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade criuUpgrade libslirp-debuginfo | Dec 13, 2023 | Sep 8, 2023 |
| Rocky_linux | — | Upgrade conmon-debugsourceUpgrade libslirp-develUpgrade netavarkUpgrade toolboxUpgrade criu-libsUpgrade skopeoUpgrade buildah-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade skopeo-testsUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfsUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirpUpgrade python3-criuUpgrade buildah-testsUpgrade slirp4netns-debuginfoUpgrade criu-debuginfoUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade criu-debugsourceUpgrade toolbox-debugsourceUpgrade containernetworking-pluginsUpgrade skopeo-debugsourceUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade libslirp-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade critUpgrade toolbox-debuginfoUpgrade crun-debugsourceUpgrade toolbox-testsUpgrade libslirp-debugsourceUpgrade buildahUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfoUpgrade runcUpgrade runc-debugsource | May 8, 2025 | Sep 8, 2023 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Enterprise to version 9.2.3 | Jul 30, 2026 | Sep 8, 2023 |
| Suse | — | Upgrade go1.21-raceUpgrade go1.21-opensslUpgrade go1.20Upgrade go1.20-docUpgrade go1.21-docUpgrade go1.20-openssl-docUpgrade go1.21-openssl-raceUpgrade go1.20-raceUpgrade go1.20-openssl-raceUpgrade go1.21-openssl-docUpgrade go1.21Upgrade go1.20-openssl | Sep 21, 2023 | Sep 8, 2023 |
| Ubuntu | — | Upgrade golang-1.18Upgrade golang-1.20-goUpgrade golang-1.17Upgrade golang-1.17-goUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.20Upgrade golang-1.21-srcUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.18-srcUpgrade golang-1.21-goUpgrade golang-1.20-srcUpgrade golang-1.18-goUpgrade golang-1.21Upgrade golang-1.18 (Ubuntu Pro) | Jan 12, 2024 | Sep 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub