If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade containers-commonUpgrade criu-develUpgrade libslirpUpgrade podman-pluginsUpgrade criu-libsUpgrade python3-podmanUpgrade go-toolsetUpgrade libslirp-develUpgrade crunUpgrade container-selinuxUpgrade skopeo-testsUpgrade golang-miscUpgrade golang-srcUpgrade python3-criuUpgrade podman-testsUpgrade golang-binUpgrade podman-remoteUpgrade slirp4netnsUpgrade critUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade criuUpgrade podman-catatonitUpgrade runcUpgrade golangUpgrade udicaUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade buildahUpgrade netavarkUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade podmanUpgrade golang-docsUpgrade toolboxUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade skopeoUpgrade golang-tests | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-miscUpgrade golangUpgrade golang-binUpgrade golang-testsUpgrade golang-src | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golang-testsUpgrade golang-miscUpgrade golangUpgrade golang-docsUpgrade golang-binUpgrade golang-shared | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade go122Upgrade go121 | Dec 10, 2025 | Mar 6, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | May 13, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jul 1, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 18, 2025 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade python3-podmanUpgrade libslirpUpgrade containers-commonUpgrade podmanUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade buildahUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade fuse-overlayfsUpgrade criu-libsUpgrade golangUpgrade podman-gvproxyUpgrade golang-miscUpgrade golang-srcUpgrade golang-testsUpgrade criuUpgrade skopeoUpgrade slirp4netnsUpgrade conmonUpgrade buildah-testsUpgrade criu-develUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade go-toolsetUpgrade container-selinuxUpgrade python3-criuUpgrade crunUpgrade udicaUpgrade containernetworking-pluginsUpgrade runcUpgrade golang-docsUpgrade delveUpgrade golang-binUpgrade podman-dockerUpgrade podman-remoteUpgrade podman-testsUpgrade crit | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade ignitionUpgrade podmanUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-azure-acr-image-credential-providerUpgrade openshiftUpgrade ose-aws-ecr-image-credential-provider | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade buildah-testsUpgrade go-toolsetUpgrade libslirp-develUpgrade aardvark-dnsUpgrade conmonUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade delveUpgrade slirp4netns-debuginfoUpgrade crun-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-dockerUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade golang-srcUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-testsUpgrade python3-criuUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade podman-debugsourceUpgrade cockpit-podmanUpgrade libslirp-debugsourceUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade delve-debuginfoUpgrade criu-libsUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debuginfoNo solution existsUpgrade criu-debuginfoUpgrade golang-docsUpgrade netavarkUpgrade golang-testsUpgrade buildahUpgrade golang-binUpgrade delve-debugsourceUpgrade udicaUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade runcUpgrade podmanUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade python3-podmanUpgrade crun-debugsourceUpgrade conmon-debugsourceUpgrade podman-catatonitUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade golang-miscUpgrade libslirp-debuginfoUpgrade golangUpgrade crunUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade criuUpgrade skopeoUpgrade critUpgrade rhc-worker-scriptUpgrade containernetworking-plugins-debugsource | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade python3-criuUpgrade libslirp-debuginfoUpgrade toolbox-debuginfoUpgrade podman-gvproxyUpgrade podman-remoteUpgrade crun-debugsourceUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade go-toolsetUpgrade libslirp-develUpgrade critUpgrade criu-libs-debuginfoUpgrade golang-binUpgrade crunUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade skopeo-testsUpgrade toolbox-debugsourceUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade delveUpgrade runcUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade buildah-testsUpgrade aardvark-dnsUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade podman-testsUpgrade podman-catatonitUpgrade criu-debuginfoUpgrade delve-debuginfoUpgrade containers-commonUpgrade skopeoUpgrade conmonUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade buildahUpgrade netavarkUpgrade libslirpUpgrade golangUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade delve-debugsource | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.21-openssl-raceUpgrade go1.21-openssl-docUpgrade go1.22-raceUpgrade go1.22-opensslUpgrade go1.21Upgrade go1.21-docUpgrade go1.21-opensslUpgrade go1.22-docUpgrade go1.22-openssl-docUpgrade go1.22Upgrade go1.22-openssl-raceUpgrade go1.21-race | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.18-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.22-goUpgrade golang-1.21-goUpgrade golang-1.22Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.22-srcUpgrade golang-1.17Upgrade golang-1.18Upgrade golang-1.21Upgrade golang-1.17-goUpgrade golang-1.21-src | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Mar 5, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub