Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade skopeo-testsUpgrade conmonUpgrade runcUpgrade criu-develUpgrade skopeoUpgrade podman-pluginsUpgrade podman-testsUpgrade libslirp-develUpgrade toolboxUpgrade python3-criuUpgrade udicaUpgrade libslirpUpgrade podmanUpgrade critUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade criu-libsUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade netavarkUpgrade buildahUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade slirp4netnsUpgrade toolbox-testsUpgrade python3-podmanUpgrade podman-dockerUpgrade criu | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-miscUpgrade golang-binUpgrade golang-srcUpgrade golang-sharedUpgrade containerdUpgrade containerd-stressUpgrade golang-testsUpgrade golangUpgrade containerd-debuginfoUpgrade golang-docs | Jun 6, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-binUpgrade golang-raceUpgrade golang-sharedUpgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade golang-src | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade runc-debugsourceUpgrade slirp4netnsUpgrade podman-dockerUpgrade go-toolsetUpgrade buildahUpgrade python3-criuUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade skopeo-debuginfoUpgrade aardvark-dnsUpgrade skopeo-debugsourceUpgrade container-selinuxUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-testsUpgrade crun-debuginfoUpgrade python3-podmanUpgrade crunUpgrade podman-plugins-debuginfoUpgrade podman-gvproxyUpgrade podman-testsUpgrade podman-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade conmon-debuginfoUpgrade buildah-debuginfoUpgrade libslirpUpgrade slirp4netns-debuginfoUpgrade criu-develUpgrade delve-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade critUpgrade delve-debugsourceUpgrade golang-srcUpgrade criu-libs-debuginfoUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade golangUpgrade criu-debuginfoUpgrade netavarkUpgrade criu-debugsourceUpgrade golang-docsUpgrade udicaUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade golang-binUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade podman-remoteUpgrade runc-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade delveUpgrade runcUpgrade toolbox-debugsourceUpgrade golang-testsUpgrade podman-pluginsUpgrade criu-libsUpgrade libslirp-debugsourceUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade criuUpgrade skopeo-testsUpgrade golang-miscUpgrade toolbox | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade criu-libsUpgrade conmonUpgrade fuse-overlayfsUpgrade skopeoUpgrade libslirp-develUpgrade aardvark-dnsUpgrade python3-podmanUpgrade buildah-testsUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade containers-commonUpgrade libslirpUpgrade podman-pluginsUpgrade critUpgrade podmanUpgrade udicaUpgrade skopeo-testsUpgrade runcUpgrade podman-gvproxyUpgrade podman-dockerUpgrade criu-develUpgrade python3-criuUpgrade criuUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade podman-testsUpgrade container-selinuxUpgrade crunUpgrade slirp4netnsUpgrade podman-catatonitUpgrade podman-remote | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade podmanUpgrade microshiftUpgrade cri-toolsUpgrade skopeoUpgrade openshift-clients | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade toolbox-testsUpgrade libslirp-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade udicaUpgrade toolbox-debuginfoUpgrade podman-dockerUpgrade libslirp-debugsourceUpgrade podman-catatonitUpgrade criuUpgrade fuse-overlayfsUpgrade toolbox-debugsourceUpgrade netavarkUpgrade buildah-debugsourceUpgrade buildah-testsUpgrade runcUpgrade skopeoUpgrade critUpgrade golang-testsUpgrade buildah-debuginfoUpgrade delve-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade golang-docsUpgrade podmanUpgrade containernetworking-pluginsUpgrade criu-debugsourceUpgrade buildahUpgrade podman-gvproxy-debuginfoNo solution existsUpgrade golang-binUpgrade python3-criuUpgrade podman-remoteUpgrade toolboxUpgrade podman-debuginfoUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debuginfoUpgrade cockpit-podmanUpgrade golang-raceUpgrade delveUpgrade slirp4netnsUpgrade libslirpUpgrade golang-srcUpgrade libslirp-develUpgrade fuse-overlayfs-debugsourceUpgrade container-selinuxUpgrade conmon-debuginfoUpgrade podman-pluginsUpgrade skopeo-testsUpgrade buildah-tests-debuginfoUpgrade skopeo-debuginfoUpgrade criu-develUpgrade golang-miscUpgrade podman-testsUpgrade aardvark-dnsUpgrade containernetworking-plugins-debugsourceUpgrade criu-debuginfoUpgrade slirp4netns-debugsourceUpgrade delve-debuginfoUpgrade podman-remote-debuginfoUpgrade runc-debugsourceUpgrade golangUpgrade podman-plugins-debuginfoUpgrade criu-libsUpgrade runc-debuginfoUpgrade containers-commonUpgrade go-toolsetUpgrade conmonUpgrade crun-debuginfoUpgrade python3-podmanUpgrade crun-debugsourceUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsource | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade criu-debugsourceUpgrade podman-catatonitUpgrade criu-debuginfoUpgrade buildah-testsUpgrade podman-gvproxyUpgrade podman-testsUpgrade runcUpgrade slirp4netnsUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debuginfoUpgrade netavarkUpgrade conmon-debugsourceUpgrade buildahUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade python3-criuUpgrade libslirpUpgrade buildah-debuginfoUpgrade criu-libs-debuginfoUpgrade criuUpgrade criu-develUpgrade libslirp-debugsourceUpgrade containers-commonUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade conmonUpgrade fuse-overlayfs-debuginfoUpgrade crunUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade runc-debuginfoUpgrade podman-plugins-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade containernetworking-pluginsUpgrade critUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-debugsource | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19Upgrade go1.20-docUpgrade go1.19-raceUpgrade go1.19-docUpgrade go1.20Upgrade go1.20-race | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19-srcUpgrade golang-1.19-goUpgrade golang-1.20-goUpgrade golang-1.19Upgrade golang-1.20-srcUpgrade golang-1.20 | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub