Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-testsUpgrade criu-develUpgrade podman-pluginsUpgrade container-selinuxUpgrade podman-remoteUpgrade podman-gvproxyUpgrade containernetworking-pluginsUpgrade runcUpgrade skopeo-testsUpgrade libslirp-develUpgrade critUpgrade udicaUpgrade crunUpgrade python3-criuUpgrade containers-commonUpgrade conmonUpgrade python3-podmanUpgrade skopeoUpgrade netavarkUpgrade libslirpUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade criuUpgrade slirp4netnsUpgrade criu-libsUpgrade podman-catatonitUpgrade toolboxUpgrade podmanUpgrade buildahUpgrade buildah-testsUpgrade podman-docker | Nov 16, 2023 | Aug 2, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ecs-initUpgrade nerdctlUpgrade cri-toolsUpgrade cri-tools-debuginfoUpgrade containerd-stressUpgrade amazon-ssm-agentUpgrade containerd-debuginfoUpgrade nerdctl-debuginfoUpgrade amazon-ssm-agent-debuginfoUpgrade containerd | Nov 1, 2023 | Aug 2, 2023 |
| Amazon_linux_2023 | — | Upgrade ecs-initUpgrade nerdctlUpgrade amazon-ssm-agentUpgrade amazon-ssm-agent-debugsourceUpgrade amazon-ssm-agent-debuginfo | Feb 17, 2025 | Aug 2, 2023 |
| Centos_linux | — | Upgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade podmanUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade skopeo-testsUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade podman-dockerUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade podman-testsUpgrade toolbox-testsUpgrade podman-catatonit-debuginfoUpgrade podman-debuginfoUpgrade toolbox-debuginfoUpgrade udicaUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade slirp4netns-debuginfoUpgrade buildah-debugsourceUpgrade podman-gvproxyUpgrade toolbox-debugsourceUpgrade critUpgrade criu-libs-debuginfoUpgrade crunUpgrade runcUpgrade conmonUpgrade criu-debuginfoUpgrade libslirp-develUpgrade buildahUpgrade buildah-debuginfoUpgrade toolboxUpgrade criu-libsUpgrade netavarkUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade skopeoUpgrade conmon-debugsourceUpgrade libslirpUpgrade buildah-testsUpgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade aardvark-dnsUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade criu-debugsourceUpgrade criu | Nov 8, 2023 | Aug 2, 2023 |
| Debian | — | Upgrade golang-golang-x-net | May 15, 2025 | Aug 2, 2023 |
| Oracle_linux | — | Upgrade buildahUpgrade container-selinuxUpgrade critUpgrade runcUpgrade fuse-overlayfsUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade libslirpUpgrade slirp4netnsUpgrade podman-testsUpgrade podman-dockerUpgrade cockpit-podmanUpgrade buildah-testsUpgrade python3-criuUpgrade podman-remoteUpgrade skopeo-testsUpgrade crunUpgrade python3-podmanUpgrade criu-libsUpgrade udicaUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade podmanUpgrade libslirp-develUpgrade criu-develUpgrade podman-pluginsUpgrade skopeoUpgrade conmonUpgrade containers-commonUpgrade podman-catatonitUpgrade netavarkUpgrade containernetworking-plugins | Nov 16, 2023 | Aug 2, 2023 |
| Redhat Openshift | — | Upgrade podmanUpgrade openshift-clients | Nov 1, 2023 | Aug 2, 2023 |
| Redhat_linux | — | Upgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debuginfoUpgrade container-selinuxUpgrade podman-pluginsUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade podman-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade runc-debuginfoUpgrade libslirpUpgrade conmonUpgrade skopeo-testsUpgrade containers-commonUpgrade podman-debugsourceUpgrade python3-podmanUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade crun-debugsourceUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade criu-develUpgrade crun-debuginfoUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade buildah-debuginfoUpgrade buildahUpgrade fuse-overlayfs-debuginfoNo solution existsUpgrade conmon-debugsourceUpgrade skopeo-debuginfoUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade skopeoUpgrade podman-dockerUpgrade buildah-testsUpgrade critUpgrade containernetworking-pluginsUpgrade podman-testsUpgrade runcUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceUpgrade criuUpgrade toolboxUpgrade podman-debuginfoUpgrade netavarkUpgrade podman-catatonitUpgrade podmanUpgrade criu-debuginfoUpgrade crunUpgrade libslirp-debuginfoUpgrade udicaUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-remote | Nov 8, 2023 | Aug 2, 2023 |
| Rocky_linux | — | Upgrade criu-libsUpgrade podman-debugsourceUpgrade libslirpUpgrade criu-develUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade crun-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-pluginsUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade containernetworking-plugins-debuginfoUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade podman-gvproxyUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade buildah-debugsourceUpgrade runc-debuginfoUpgrade conmon-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netns-debuginfoUpgrade aardvark-dnsUpgrade podman-testsUpgrade critUpgrade buildah-tests-debuginfoUpgrade runcUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade criu-debugsourceUpgrade buildah-testsUpgrade criu-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade conmonUpgrade netavarkUpgrade buildahUpgrade criuUpgrade podman-debuginfoUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade runc-debugsource | Dec 1, 2025 | Nov 28, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Enterprise to version 9.2.3 | Jul 30, 2026 | Aug 2, 2023 |
| Ubuntu | — | Upgrade golang-golang-x-net-dev (Ubuntu Pro) | Mar 13, 2026 | Aug 2, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub