Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade container-selinuxUpgrade podman-testsUpgrade runcUpgrade criu-develUpgrade podman-pluginsUpgrade skopeoUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade libslirp-develUpgrade udicaUpgrade conmonUpgrade containernetworking-pluginsUpgrade critUpgrade toolboxUpgrade containers-commonUpgrade podmanUpgrade libslirpUpgrade skopeo-testsUpgrade crunUpgrade podman-catatonitUpgrade podman-dockerUpgrade podman-remoteUpgrade buildahUpgrade criuUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade aardvark-dnsUpgrade netavarkUpgrade slirp4netnsUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade podman-gvproxy | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade containerd-stressUpgrade golang-testsUpgrade golang-binUpgrade containerd-debuginfoUpgrade golangUpgrade golang-srcUpgrade golang-sharedUpgrade containerdUpgrade golang-docsUpgrade golang-misc | Jun 6, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-docsUpgrade golang-raceUpgrade golang-sharedUpgrade golang-srcUpgrade golang-testsUpgrade golangUpgrade golang-misc | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade buildah-debuginfoUpgrade toolbox-testsUpgrade buildahUpgrade go-toolsetUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeo-debugsourceUpgrade podman-debugsourceUpgrade podman-testsUpgrade conmonUpgrade container-selinuxUpgrade skopeo-debuginfoUpgrade libslirpUpgrade buildah-testsUpgrade crun-debuginfoUpgrade golang-raceUpgrade podman-dockerUpgrade python3-podmanUpgrade crunUpgrade podman-plugins-debuginfoUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade python3-criuUpgrade skopeo-testsUpgrade netavarkUpgrade golangUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade criu-debuginfoUpgrade toolbox-debuginfoUpgrade criuUpgrade critUpgrade golang-testsUpgrade golang-srcUpgrade fuse-overlayfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade udicaUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade golang-binUpgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debuginfoUpgrade criu-libs-debuginfoUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade podman-catatonit-debuginfoUpgrade golang-miscUpgrade golang-docsUpgrade criu-debugsourceUpgrade containers-commonUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade delve-debugsourceUpgrade criu-libsUpgrade toolbox-debugsourceUpgrade podman-pluginsUpgrade toolboxUpgrade slirp4netns-debugsourceUpgrade runcUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade delveUpgrade crun-debugsource | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade skopeo-testsUpgrade podmanUpgrade podman-pluginsUpgrade crunUpgrade critUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade slirp4netnsUpgrade udicaUpgrade python3-criuUpgrade podman-remoteUpgrade criu-develUpgrade podman-gvproxyUpgrade runcUpgrade podman-testsUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade skopeoUpgrade netavarkUpgrade criu-libsUpgrade buildah-testsUpgrade buildahUpgrade aardvark-dnsUpgrade containers-commonUpgrade conmonUpgrade libslirp-develUpgrade python3-podmanUpgrade fuse-overlayfs | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade microshiftUpgrade podmanUpgrade skopeoUpgrade openshift-clientsUpgrade cri-tools | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade buildah-testsUpgrade podman-catatonitUpgrade podman-dockerUpgrade podman-remoteUpgrade runcUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade criuUpgrade golang-binUpgrade netavarkUpgrade critUpgrade podman-gvproxy-debuginfoUpgrade skopeoUpgrade libslirp-debugsourceUpgrade buildah-debuginfoUpgrade golang-testsUpgrade toolbox-debuginfoUpgrade fuse-overlayfsUpgrade buildahUpgrade udicaUpgrade golang-docsUpgrade toolbox-debugsourceUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debuginfoNo solution existsUpgrade containernetworking-pluginsUpgrade delve-debugsourceUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade skopeo-debugsourceUpgrade crunUpgrade toolboxUpgrade toolbox-testsUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade criu-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade python3-podmanUpgrade golangUpgrade conmonUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade skopeo-testsUpgrade golang-srcUpgrade criu-debuginfoUpgrade go-toolsetUpgrade podman-plugins-debuginfoUpgrade criu-develUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade crun-debugsourceUpgrade podman-pluginsUpgrade aardvark-dnsUpgrade containernetworking-plugins-debuginfoUpgrade golang-miscUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-raceUpgrade cockpit-podmanUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade containers-commonUpgrade criu-libsUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-develUpgrade delveUpgrade container-selinuxUpgrade delve-debuginfoUpgrade podman-tests | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade criuUpgrade buildahUpgrade aardvark-dnsUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade libslirpUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade netavarkUpgrade runcUpgrade podman-testsUpgrade podman-gvproxyUpgrade conmon-debugsourceUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade buildah-testsUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade podman-catatonitUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade podman-remoteUpgrade slirp4netns-debugsourceUpgrade podman-remote-debuginfoUpgrade criu-libsUpgrade conmonUpgrade podman-pluginsUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade critUpgrade containernetworking-pluginsUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade criu-develUpgrade containers-commonUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-develUpgrade podman-plugins-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-plugins-debugsource | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19Upgrade go1.20-docUpgrade go1.20-raceUpgrade go1.20Upgrade go1.19-docUpgrade go1.19-race | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19Upgrade golang-1.20Upgrade golang-1.20-srcUpgrade golang-1.19-srcUpgrade golang-1.20-goUpgrade golang-1.19-go | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub