The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script" within JS literals in <script> contexts. This may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped. This could be leveraged to perform an XSS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade aardvark-dnsUpgrade conmonUpgrade podman-testsUpgrade buildah-testsUpgrade toolbox-testsUpgrade python3-criuUpgrade udicaUpgrade podman-gvproxyUpgrade container-selinuxUpgrade slirp4netnsUpgrade libslirpUpgrade cockpit-podmanUpgrade crunUpgrade python3-podmanUpgrade podman-dockerUpgrade buildahUpgrade podmanUpgrade critUpgrade criu-develUpgrade criuUpgrade podman-catatonitUpgrade netavarkUpgrade libslirp-develUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade containers-commonUpgrade podman-pluginsUpgrade fuse-overlayfsUpgrade runcUpgrade skopeo-testsUpgrade toolboxUpgrade skopeo | Dec 19, 2023 | Sep 8, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Sep 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-testsUpgrade golang-sharedUpgrade golang-srcUpgrade golang-binUpgrade golang-miscUpgrade golang | Jan 9, 2024 | Sep 8, 2023 |
| Amazon_linux | — | Upgrade golang | Jan 9, 2024 | Sep 8, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golang-srcUpgrade golangUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade golang-shared | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade cockpit-podmanUpgrade criu-develUpgrade fuse-overlayfs-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade podman-testsUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade criu-debugsourceUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade crunUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade criu-libsUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade container-selinuxUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade libslirpUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceUpgrade runcUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade buildahUpgrade aardvark-dnsUpgrade criuUpgrade fuse-overlayfsUpgrade podman-catatonit-debuginfoUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade critUpgrade buildah-testsUpgrade toolboxUpgrade podman-dockerUpgrade toolbox-testsUpgrade podman-remoteUpgrade criu-debuginfoUpgrade udicaUpgrade python3-podmanUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade netavarkUpgrade buildah-debugsourceUpgrade crun-debugsource | Dec 13, 2023 | Sep 8, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Sep 8, 2023 |
| Freebsd | — | Upgrade go120Upgrade go121 | Sep 8, 2023 | Sep 7, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | Sep 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Sep 8, 2023 |
| Oracle_linux | — | Upgrade libslirpUpgrade libslirp-develUpgrade podman-gvproxyUpgrade container-selinuxUpgrade podman-testsUpgrade containers-commonUpgrade python3-podmanUpgrade aardvark-dnsUpgrade criu-libsUpgrade podman-pluginsUpgrade criu-develUpgrade slirp4netnsUpgrade skopeo-testsUpgrade conmonUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade skopeoUpgrade podman-remoteUpgrade netavarkUpgrade containernetworking-pluginsUpgrade buildahUpgrade podman-dockerUpgrade podman-catatonitUpgrade runcUpgrade python3-criuUpgrade fuse-overlayfsUpgrade crunUpgrade podmanUpgrade critUpgrade buildah-testsUpgrade udica | Dec 14, 2023 | Sep 6, 2023 |
| Redhat Openshift | — | Upgrade skopeoUpgrade podmanUpgrade containernetworking-pluginsUpgrade microshiftUpgrade openshift-clientsUpgrade buildah | Nov 1, 2023 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade crunUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade container-selinuxUpgrade podman-gvproxyUpgrade buildah-testsUpgrade buildahUpgrade podman-dockerUpgrade runc-debugsourceUpgrade runc-debuginfoUpgrade cockpit-podmanUpgrade buildah-debuginfoUpgrade skopeo-debuginfoUpgrade podman-testsUpgrade podman-debugsourceUpgrade python3-podmanUpgrade skopeo-testsUpgrade libslirp-debugsourceUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade containernetworking-plugins-debuginfoUpgrade conmonUpgrade criu-libsUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade netavarkUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade runcUpgrade podman-remote-debuginfoUpgrade criu-debugsourceUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-pluginsUpgrade podmanUpgrade criu-develUpgrade criu-libs-debuginfoUpgrade fuse-overlayfsUpgrade criu-debuginfoUpgrade libslirp-debuginfoUpgrade udicaUpgrade podman-gvproxy-debuginfoUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hookUpgrade podman-debuginfoUpgrade critUpgrade skopeoNo solution existsUpgrade podman-remoteUpgrade toolbox-debugsourceUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade skopeo-debugsourceUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsource | Dec 13, 2023 | Sep 8, 2023 |
| Rocky_linux | — | Upgrade skopeo-debugsourceUpgrade libslirp-debuginfoUpgrade skopeo-debuginfoUpgrade toolbox-debugsourceUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade runcUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade criu-debugsourceUpgrade python3-criuUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade critUpgrade runc-debugsourceUpgrade toolbox-debuginfoUpgrade conmon-debuginfoUpgrade criu-libs-debuginfoUpgrade crun-debuginfoUpgrade toolbox-testsUpgrade libslirp-debugsourceUpgrade buildahUpgrade aardvark-dnsUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netns-debugsourceUpgrade conmonUpgrade toolboxUpgrade fuse-overlayfsUpgrade skopeo-testsUpgrade criuUpgrade containernetworking-plugins-debugsourceUpgrade criu-develUpgrade libslirp-develUpgrade netavarkUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade runc-debuginfoUpgrade skopeoUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade buildah-debugsource | May 8, 2025 | Sep 8, 2023 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.3.1 | Jul 30, 2026 | Sep 8, 2023 |
| Suse | — | Upgrade go1.21-raceUpgrade go1.21-opensslUpgrade go1.20-docUpgrade go1.20Upgrade go1.21-docUpgrade go1.20-openssl-docUpgrade go1.20-raceUpgrade go1.21-openssl-raceUpgrade go1.20-opensslUpgrade go1.21-openssl-docUpgrade go1.20-openssl-raceUpgrade go1.21 | Sep 21, 2023 | Sep 8, 2023 |
| Ubuntu | — | Upgrade golang-1.20-srcUpgrade golang-1.18-srcUpgrade golang-1.17-srcUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.21-goUpgrade golang-1.18-goUpgrade golang-1.21Upgrade golang-1.21-srcUpgrade golang-1.20Upgrade golang-1.20-goUpgrade golang-1.18Upgrade golang-1.17-goUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17 | Jan 12, 2024 | Sep 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub