Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Sep 7, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golangUpgrade golang-testsUpgrade golang-docsUpgrade golang-miscUpgrade golang-srcUpgrade golang-bin | Sep 1, 2026 | Aug 13, 2026 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade cri-oUpgrade openshift | Sep 16, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade buildah-testsUpgrade libslirp-debuginfoUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade slirp4netnsUpgrade podman-testsUpgrade opentelemetry-collectorNo solution existsUpgrade golang-srcUpgrade runc-debugsourceUpgrade grafana-debuginfoUpgrade ignition-edgeUpgrade podman-gvproxyUpgrade golang-miscUpgrade image-builder-debugsourceUpgrade skopeo-debuginfoUpgrade osbuild-composer-debuginfoUpgrade grafana-pcp-debuginfoUpgrade ignitionUpgrade skopeo-debugsourceUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade podman-dockerUpgrade toolbox-debugsourceUpgrade aardvark-dnsUpgrade libslirpUpgrade grafana-pcp-debugsourceUpgrade criu-libs-debuginfoUpgrade buildah-tests-debuginfoUpgrade criuUpgrade buildahUpgrade conmon-debuginfoUpgrade criu-debuginfoUpgrade crun-debuginfoUpgrade netavarkUpgrade critUpgrade osbuild-composer-coreUpgrade ignition-debugsourceUpgrade python3-criuUpgrade go-toolsetUpgrade cockpit-podmanUpgrade udicaUpgrade golangUpgrade runcUpgrade rhc-develUpgrade containers-commonUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade flightctl-agentUpgrade osbuild-composerUpgrade osbuild-composer-core-debuginfoUpgrade skopeoUpgrade rhcUpgrade buildah-debugsourceUpgrade image-builderUpgrade grafana-debugsourceUpgrade ignition-validateUpgrade containernetworking-plugins-debuginfoUpgrade grafana-selinuxUpgrade osbuild-composer-dnf-jsonUpgrade image-builder-debuginfoUpgrade golang-raceUpgrade podman-debuginfoUpgrade ignition-validate-debuginfoUpgrade flightctl-servicesUpgrade podman-plugins-debuginfoUpgrade ignition-debuginfoUpgrade criu-libsUpgrade podman-catatonit-debuginfoUpgrade flightctl-selinuxUpgrade toolboxUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade toolbox-debuginfoUpgrade podmanUpgrade libslirp-develUpgrade libslirp-debugsourceUpgrade osbuild-composer-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade golang-docsUpgrade delve-debuginfoUpgrade delveUpgrade crun-debugsourceUpgrade container-selinuxUpgrade flightctl-cliUpgrade skopeo-testsUpgrade rhc-debuginfoUpgrade podman-remote-debuginfoUpgrade flightctl-observabilityUpgrade podman-remoteUpgrade podman-pluginsUpgrade podman-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade ignition-grubUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade rhc-debugsourceUpgrade golang-binUpgrade osbuild-composer-workerUpgrade golang-testsUpgrade crunUpgrade conmonUpgrade fuse-overlayfs-debuginfoUpgrade grafana-pcpUpgrade slirp4netns-debuginfoUpgrade criu-develUpgrade osbuild-composer-tests-debuginfoUpgrade grafanaUpgrade fuse-overlayfs-debugsource | Aug 17, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade buildahUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsourceUpgrade osbuild-composer-debugsourceUpgrade image-builder-debugsourceUpgrade go-toolsetUpgrade conmonUpgrade grafana-pcp-debuginfoUpgrade osbuild-composer-coreUpgrade osbuild-composer-debuginfoUpgrade slirp4netnsUpgrade delveUpgrade podman-testsUpgrade podman-pluginsUpgrade buildah-testsUpgrade netavarkUpgrade skopeo-debugsourceUpgrade toolboxUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade golang-raceUpgrade conmon-debugsourceUpgrade skopeo-debuginfoUpgrade crun-debuginfoUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade grafana-pcp-debugsourceUpgrade crunUpgrade libslirpUpgrade osbuild-composer-core-debuginfoUpgrade grafanaUpgrade runc-debuginfoUpgrade podman-catatonit-debuginfoUpgrade skopeo-testsUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade skopeoUpgrade runcUpgrade podmanUpgrade delve-debuginfoUpgrade crun-debugsourceUpgrade criu-libsUpgrade delve-debugsourceUpgrade containernetworking-pluginsUpgrade grafana-debugsourceUpgrade osbuild-composerUpgrade golangUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade podman-debugsourceUpgrade libslirp-debuginfoUpgrade opentelemetry-collectorUpgrade slirp4netns-debuginfoUpgrade criu-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-workerUpgrade image-builder-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade grafana-pcpUpgrade image-builderUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade fuse-overlayfsUpgrade criu-libs-debuginfoUpgrade golang-binUpgrade buildah-debugsourceUpgrade runc-debugsourceUpgrade critUpgrade grafana-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade criuUpgrade podman-plugins-debuginfoUpgrade grafana-selinuxUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade containernetworking-plugins-debuginfo | Aug 28, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub