Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade aardvark-dnsUpgrade netavarkUpgrade golang-binUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade skopeoUpgrade podman-remoteUpgrade podmanUpgrade golangUpgrade golang-srcUpgrade criu-libsUpgrade delveUpgrade podman-testsUpgrade golang-raceUpgrade crunUpgrade buildahUpgrade golang-testsUpgrade criu-develUpgrade cockpit-podmanUpgrade golang-docsUpgrade criuUpgrade podman-pluginsUpgrade libslirpUpgrade go-toolsetUpgrade podman-gvproxyUpgrade python3-criuUpgrade conmonUpgrade podman-dockerUpgrade toolbox-testsUpgrade udicaUpgrade toolboxUpgrade python3-podmanUpgrade podman-catatonitUpgrade buildah-testsUpgrade runcUpgrade critUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade container-selinux | May 29, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-srcUpgrade dockerUpgrade golang-miscUpgrade docker-debuginfoUpgrade golang-binUpgrade golang-raceUpgrade amazon-ssm-agentUpgrade containerd-debuginfoUpgrade containerdUpgrade containerd-stressUpgrade golang-docsUpgrade amazon-ssm-agent-debuginfoUpgrade golang-sharedUpgrade golang-tests | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golangUpgrade amazon-ssm-agent | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang-miscUpgrade golangUpgrade golang-sharedUpgrade golang-raceUpgrade golang-testsUpgrade golang-docs | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade golang-binUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade fuse-overlayfsUpgrade toolbox-debugsourceUpgrade criuUpgrade skopeo-debugsourceUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade containernetworking-pluginsUpgrade libslirp-debuginfoUpgrade podman-dockerUpgrade toolbox-debuginfoUpgrade podman-testsUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade podman-gvproxy-debuginfoUpgrade runcUpgrade conmon-debugsourceUpgrade toolboxUpgrade buildah-testsUpgrade crunUpgrade golang-docsUpgrade python3-criuUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade netavarkUpgrade buildahUpgrade cockpit-podmanUpgrade podman-debuginfoUpgrade golang-testsUpgrade podmanUpgrade critUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonitUpgrade udicaUpgrade go-toolsetUpgrade criu-debugsourceUpgrade criu-develUpgrade conmon-debuginfoUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade criu-libsUpgrade podman-remote-debuginfoUpgrade golang-miscUpgrade golang-srcUpgrade delveUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade conmonUpgrade crun-debugsourceUpgrade podman-gvproxyUpgrade libslirpUpgrade golang-raceUpgrade golangUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade libslirp-develUpgrade container-selinuxUpgrade containers-commonUpgrade aardvark-dnsUpgrade podman-pluginsUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade python3-podmanUpgrade containernetworking-plugins-debugsourceUpgrade delve-debuginfoUpgrade crun-debuginfo | May 29, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade libslirp-develUpgrade container-selinuxUpgrade golangUpgrade golang-docsUpgrade golang-srcUpgrade critUpgrade go-toolsetUpgrade golang-binUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade runcUpgrade buildahUpgrade golang-miscUpgrade golang-testsUpgrade python3-criuUpgrade criu-libsUpgrade aardvark-dnsUpgrade buildah-testsUpgrade podmanUpgrade containers-commonUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade udicaUpgrade skopeoUpgrade podman-dockerUpgrade skopeo-testsUpgrade delveUpgrade slirp4netnsUpgrade criu-develUpgrade podman-gvproxyUpgrade libslirpUpgrade cockpit-podmanUpgrade golang-raceUpgrade podman-testsUpgrade crunUpgrade conmonUpgrade criuUpgrade python3-podmanUpgrade netavarkUpgrade podman-plugins | May 26, 2023 | Apr 20, 2023 |
| Rapid7 Scan Assistant | — | Upgrade to the latest version of Rapid7 InsightVM Scan Assistant | Jan 3, 2024 | May 11, 2023 |
| Redhat Openshift | — | Upgrade buildahUpgrade skopeoUpgrade openshift-clientsUpgrade openshiftUpgrade podman | Jun 8, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade skopeoUpgrade critUpgrade crun-debugsourceUpgrade golang-raceUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade netavarkUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade containers-commonUpgrade golang-docsUpgrade golang-srcUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-pluginsUpgrade libslirp-debuginfoUpgrade podman-remote-debuginfoUpgrade conmonUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolbox-debugsourceUpgrade golang-binUpgrade toolboxUpgrade runcUpgrade libslirp-develUpgrade crunUpgrade criu-libsUpgrade podman-debuginfoUpgrade criu-develUpgrade delveUpgrade slirp4netns-debugsourceUpgrade golang-testsUpgrade delve-debugsourceUpgrade python3-podmanUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade delve-debuginfoUpgrade criu-libs-debuginfoUpgrade podmanUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade criu-debugsourceUpgrade podman-plugins-debuginfoUpgrade libslirpUpgrade criu-debuginfoUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade podman-dockerUpgrade buildahUpgrade podman-testsUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade runc-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade golangUpgrade skopeo-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade go-toolsetUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade golang-miscUpgrade buildah-testsUpgrade udicaUpgrade toolbox-debuginfoNo solution existsUpgrade podman-gvproxyUpgrade container-selinuxUpgrade toolbox-tests | May 29, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade podman-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-develUpgrade go-toolsetUpgrade python3-criuUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libsUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade aardvark-dnsUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade conmonUpgrade delveUpgrade buildahUpgrade libslirpUpgrade criu-develUpgrade criu-debugsourceUpgrade slirp4netns-debuginfoUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade crunUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonitUpgrade fuse-overlayfs-debugsourceUpgrade criu-libs-debuginfoUpgrade criuUpgrade runcUpgrade buildah-tests-debuginfoUpgrade conmon-debugsourceUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade podmanUpgrade golangUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade critUpgrade delve-debugsourceUpgrade libslirp-debuginfoUpgrade golang-binUpgrade criu-debuginfoUpgrade containers-commonUpgrade buildah-debugsourceUpgrade golang-raceUpgrade podman-catatonit-debuginfoUpgrade netavark | Mar 5, 2024 | May 11, 2023 |
| Suse | — | Upgrade go1.20-docUpgrade go1.19Upgrade go1.19-raceUpgrade go1.20-raceUpgrade go1.20Upgrade go1.19-doc | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19Upgrade golang-1.20-goUpgrade golang-1.19-srcUpgrade golang-1.20-srcUpgrade golang-1.19-goUpgrade golang-1.20 | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub