If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade slirp4netnsUpgrade aardvark-dnsUpgrade golangUpgrade buildahUpgrade podman-gvproxyUpgrade skopeoUpgrade golang-binUpgrade cockpit-podmanUpgrade runcUpgrade critUpgrade criuUpgrade podman-remoteUpgrade buildah-testsUpgrade podmanUpgrade golang-testsUpgrade podman-dockerUpgrade podman-testsUpgrade udicaUpgrade fuse-overlayfsUpgrade golang-docsUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade netavarkUpgrade toolboxUpgrade libslirpUpgrade delveUpgrade criu-develUpgrade containers-commonUpgrade libslirp-develUpgrade python3-podmanUpgrade skopeo-testsUpgrade go-toolsetUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade golang-srcUpgrade container-selinuxUpgrade crunUpgrade podman-pluginsUpgrade conmonUpgrade python3-criu | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-binUpgrade golang-srcUpgrade golang-testsUpgrade golang-miscUpgrade golang-sharedUpgrade golang-docs | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-sharedUpgrade golang-binUpgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-misc | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade go122Upgrade go121 | Dec 10, 2025 | Mar 6, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | May 13, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jul 1, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Mar 18, 2025 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade crunUpgrade delveUpgrade skopeo-testsUpgrade podman-dockerUpgrade python3-criuUpgrade go-toolsetUpgrade udicaUpgrade golang-binUpgrade criu-develUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade critUpgrade podman-testsUpgrade podman-remoteUpgrade runcUpgrade cockpit-podmanUpgrade container-selinuxUpgrade podman-gvproxyUpgrade criu-libsUpgrade python3-podmanUpgrade buildah-testsUpgrade libslirp-develUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade podman-catatonitUpgrade containers-commonUpgrade netavarkUpgrade criuUpgrade conmonUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade skopeoUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade libslirpUpgrade golang-testsUpgrade podman | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade ose-gcp-gcr-image-credential-providerUpgrade ignitionUpgrade ose-azure-acr-image-credential-providerUpgrade openshiftUpgrade podmanUpgrade ose-aws-ecr-image-credential-provider | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade buildah-debugsourceUpgrade podman-pluginsUpgrade criuUpgrade podmanUpgrade golang-docsUpgrade crunUpgrade buildahUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfsUpgrade golang-testsUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade crun-debugsourceUpgrade rhc-worker-scriptUpgrade criu-libs-debuginfoUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade golang-binUpgrade python3-podmanUpgrade netavarkUpgrade criu-debuginfoUpgrade podman-remoteUpgrade udicaUpgrade toolboxUpgrade skopeoNo solution existsUpgrade critUpgrade golangUpgrade toolbox-testsUpgrade podman-catatonit-debuginfoUpgrade podman-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade runcUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote-debuginfoUpgrade golang-miscUpgrade libslirp-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade buildah-testsUpgrade podman-plugins-debuginfoUpgrade podman-gvproxyUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade toolbox-debuginfoUpgrade golang-srcUpgrade fuse-overlayfs-debugsourceUpgrade podman-dockerUpgrade slirp4netns-debugsourceUpgrade libslirpUpgrade podman-testsUpgrade delveUpgrade slirp4netnsUpgrade containers-commonUpgrade criu-libsUpgrade cockpit-podmanUpgrade delve-debuginfoUpgrade container-selinuxUpgrade crun-debuginfoUpgrade libslirp-develUpgrade go-toolsetUpgrade podman-debugsourceUpgrade criu-develUpgrade conmonUpgrade aardvark-dnsUpgrade libslirp-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade conmon-debuginfo | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade criu-develUpgrade golang-binUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debugsourceUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade crun-debugsourceUpgrade toolbox-debugsourceUpgrade crunUpgrade conmon-debuginfoUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade criu-debugsourceUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade delveUpgrade libslirp-debugsourceUpgrade podman-remoteUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-gvproxyUpgrade critUpgrade criu-libs-debuginfoUpgrade crun-debuginfoUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debuginfoUpgrade go-toolsetUpgrade podman-pluginsUpgrade toolbox-debuginfoUpgrade libslirp-debuginfoUpgrade toolboxUpgrade podman-catatonitUpgrade criu-debuginfoUpgrade delve-debugsourceUpgrade criuUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade skopeoUpgrade delve-debuginfoUpgrade conmonUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade libslirpUpgrade golangUpgrade buildah-debugsourceUpgrade buildahUpgrade toolbox-testsUpgrade podman-catatonit-debuginfoUpgrade netavarkUpgrade podman-testsUpgrade podmanUpgrade buildah-testsUpgrade aardvark-dns | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.21-openssl-raceUpgrade go1.22-opensslUpgrade go1.21Upgrade go1.21-docUpgrade go1.21-openssl-docUpgrade go1.22-raceUpgrade go1.22Upgrade go1.22-openssl-raceUpgrade go1.22-openssl-docUpgrade go1.21-opensslUpgrade go1.21-raceUpgrade go1.22-doc | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.22-srcUpgrade golang-1.17-goUpgrade golang-1.18Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.21Upgrade golang-1.21-srcUpgrade golang-1.17-srcUpgrade golang-1.21-goUpgrade golang-1.22-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.18-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.22 | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub