The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script" within JS literals in <script> contexts. This may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped. This could be leveraged to perform an XSS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade udicaUpgrade crunUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade podman-testsUpgrade buildah-testsUpgrade python3-criuUpgrade podman-dockerUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade container-selinuxUpgrade conmonUpgrade python3-podmanUpgrade libslirpUpgrade buildahUpgrade skopeoUpgrade critUpgrade toolboxUpgrade podman-remoteUpgrade runcUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade podmanUpgrade criuUpgrade criu-develUpgrade criu-libsUpgrade podman-pluginsUpgrade libslirp-develUpgrade netavarkUpgrade podman-catatonitUpgrade containers-common | Dec 19, 2023 | Sep 8, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Sep 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-miscUpgrade golang-binUpgrade golang-srcUpgrade golang-sharedUpgrade golang-docsUpgrade golang-tests | Jan 9, 2024 | Sep 8, 2023 |
| Amazon_linux | — | Upgrade golang | Jan 9, 2024 | Sep 8, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade golang-shared | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade libslirp-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade python3-podmanUpgrade udicaUpgrade containernetworking-pluginsUpgrade skopeoUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade buildahUpgrade aardvark-dnsUpgrade buildah-testsUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-debugsourceUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade critUpgrade criu-libs-debuginfoUpgrade podman-catatonitUpgrade criuUpgrade fuse-overlayfsUpgrade podman-debuginfoUpgrade crun-debugsourceUpgrade skopeo-debugsourceUpgrade toolboxUpgrade podman-dockerUpgrade podman-remoteUpgrade toolbox-testsUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-debugsourceUpgrade netavarkUpgrade podman-remote-debuginfoUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade crunUpgrade libslirpUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade criu-develUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade containers-commonUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade conmonUpgrade conmon-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-pluginsUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade cockpit-podmanUpgrade libslirp-develUpgrade toolbox-debuginfoUpgrade skopeo-tests | Dec 13, 2023 | Sep 8, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Sep 8, 2023 |
| Freebsd | — | Upgrade go121Upgrade go120 | Sep 8, 2023 | Sep 7, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Sep 8, 2023 |
| Oracle_linux | — | Upgrade slirp4netnsUpgrade python3-podmanUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade conmonUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade podman-pluginsUpgrade podman-testsUpgrade skopeo-testsUpgrade libslirp-develUpgrade container-selinuxUpgrade cockpit-podmanUpgrade libslirpUpgrade containers-commonUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade criuUpgrade crunUpgrade netavarkUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade podman-catatonitUpgrade runcUpgrade skopeoUpgrade buildahUpgrade podman-dockerUpgrade udicaUpgrade podmanUpgrade crit | Dec 14, 2023 | Sep 6, 2023 |
| Redhat Openshift | — | Upgrade podmanUpgrade containernetworking-pluginsUpgrade microshiftUpgrade openshift-clientsUpgrade skopeoUpgrade buildah | Nov 1, 2023 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade libslirp-debugsourceUpgrade podman-dockerUpgrade skopeo-testsUpgrade buildah-debuginfoUpgrade container-selinuxUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade buildah-testsUpgrade conmonUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade aardvark-dnsUpgrade toolbox-debuginfoUpgrade skopeo-debuginfoUpgrade podman-gvproxyUpgrade podman-testsUpgrade python3-criuUpgrade python3-podmanUpgrade podman-plugins-debuginfoUpgrade conmon-debuginfoUpgrade buildahUpgrade podman-debugsourceUpgrade criu-libsUpgrade libslirp-develUpgrade libslirpUpgrade containernetworking-plugins-debugsourceUpgrade crun-debuginfoUpgrade buildah-tests-debuginfoUpgrade toolbox-testsNo solution existsUpgrade podman-catatonitUpgrade skopeoUpgrade criu-debugsourceUpgrade runcUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-debuginfoUpgrade netavarkUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-debugsourceUpgrade podman-remoteUpgrade toolboxUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade criu-develUpgrade criu-debuginfoUpgrade criu-libs-debuginfoUpgrade podmanUpgrade udicaUpgrade libslirp-debuginfo | Dec 13, 2023 | Sep 8, 2023 |
| Rocky_linux | — | Upgrade runc-debugsourceUpgrade buildah-testsUpgrade python3-criuUpgrade skopeo-debuginfoUpgrade criu-debugsourceUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade crun-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade toolbox-testsUpgrade slirp4netnsUpgrade criu-libs-debuginfoUpgrade aardvark-dnsUpgrade buildahUpgrade runcUpgrade conmon-debuginfoUpgrade toolbox-debugsourceUpgrade slirp4netns-debuginfoUpgrade criu-debuginfoUpgrade libslirp-debugsourceUpgrade critUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade toolbox-debuginfoUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade containers-commonUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade libslirpUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debugsourceUpgrade crunUpgrade toolboxUpgrade criu-libsUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade skopeoUpgrade skopeo-testsUpgrade criu-develUpgrade criuUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs | May 8, 2025 | Sep 8, 2023 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.3.1 | Jul 30, 2026 | Sep 8, 2023 |
| Suse | — | Upgrade go1.21Upgrade go1.21-openssl-docUpgrade go1.20-openssl-raceUpgrade go1.20-opensslUpgrade go1.20-raceUpgrade go1.21-openssl-raceUpgrade go1.20-openssl-docUpgrade go1.20Upgrade go1.21-opensslUpgrade go1.20-docUpgrade go1.21-docUpgrade go1.21-race | Sep 21, 2023 | Sep 8, 2023 |
| Ubuntu | — | Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.21-srcUpgrade golang-1.17Upgrade golang-1.20Upgrade golang-1.17-goUpgrade golang-1.18Upgrade golang-1.20-goUpgrade golang-1.21-goUpgrade golang-1.21Upgrade golang-1.17-srcUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.20-srcUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.18-src | Jan 12, 2024 | Sep 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub