Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade golang-srcUpgrade libslirp-develUpgrade golangUpgrade criu-libsUpgrade aardvark-dnsUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade containernetworking-pluginsUpgrade golang-miscUpgrade netavarkUpgrade golang-binUpgrade skopeo-testsUpgrade skopeoUpgrade podman-catatonitUpgrade python3-criuUpgrade golang-testsUpgrade podman-dockerUpgrade criu-develUpgrade go-toolsetUpgrade golang-docsUpgrade cockpit-podmanUpgrade criuUpgrade podman-gvproxyUpgrade runcUpgrade buildah-testsUpgrade libslirpUpgrade conmonUpgrade delveUpgrade toolboxUpgrade toolbox-testsUpgrade python3-podmanUpgrade golang-raceUpgrade podman-pluginsUpgrade udicaUpgrade container-selinuxUpgrade buildahUpgrade crunUpgrade critUpgrade slirp4netnsUpgrade podman-testsUpgrade fuse-overlayfs | May 29, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade amazon-ssm-agentUpgrade containerd-debuginfoUpgrade golang-raceUpgrade golang-testsUpgrade containerd-stressUpgrade golang-docsUpgrade amazon-ssm-agent-debuginfoUpgrade golang-binUpgrade golang-sharedUpgrade golangUpgrade golang-miscUpgrade docker-debuginfoUpgrade dockerUpgrade golang-src | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golangUpgrade amazon-ssm-agent | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-testsUpgrade golang-raceUpgrade golang-sharedUpgrade golang-binUpgrade golangUpgrade golang-miscUpgrade golang-src | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade podman-gvproxy-debuginfoUpgrade criuUpgrade skopeoUpgrade buildah-debuginfoUpgrade delve-debugsourceUpgrade golang-docsUpgrade buildah-testsUpgrade fuse-overlayfs-debuginfoUpgrade crunUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade podman-dockerUpgrade toolboxUpgrade netavarkUpgrade podmanUpgrade critUpgrade runcUpgrade toolbox-debuginfoUpgrade runc-debugsourceUpgrade podman-testsUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade conmon-debugsourceUpgrade podman-debuginfoUpgrade cockpit-podmanUpgrade golang-testsUpgrade buildahUpgrade golang-binUpgrade libslirp-debugsourceUpgrade podman-remoteUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade udicaUpgrade buildah-debugsourceUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade libslirp-debuginfoUpgrade criu-libsUpgrade podman-gvproxyUpgrade golang-raceUpgrade conmonUpgrade libslirpUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade slirp4netns-debuginfoUpgrade criu-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade crun-debugsourceUpgrade python3-podmanUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade libslirp-develUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade container-selinuxUpgrade criu-debugsourceUpgrade containers-commonUpgrade aardvark-dnsUpgrade skopeo-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade golang-miscUpgrade golang-srcUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade crun-debuginfoUpgrade criu-develUpgrade fuse-overlayfs-debugsourceUpgrade golangUpgrade podman-plugins-debuginfoUpgrade delveUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc-debuginfo | May 29, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade podman-gvproxyUpgrade criuUpgrade udicaUpgrade podman-dockerUpgrade crunUpgrade skopeoUpgrade skopeo-testsUpgrade delveUpgrade libslirpUpgrade cockpit-podmanUpgrade netavarkUpgrade conmonUpgrade slirp4netnsUpgrade golang-raceUpgrade criu-develUpgrade podman-pluginsUpgrade podman-testsUpgrade python3-podmanUpgrade criu-libsUpgrade aardvark-dnsUpgrade runcUpgrade golang-srcUpgrade critUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade python3-criuUpgrade golang-binUpgrade podman-remoteUpgrade containers-commonUpgrade buildahUpgrade golangUpgrade libslirp-develUpgrade go-toolsetUpgrade buildah-testsUpgrade container-selinuxUpgrade podmanUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade golang-testsUpgrade golang-miscUpgrade fuse-overlayfs | May 26, 2023 | Apr 20, 2023 |
| Rapid7 Scan Assistant | — | Upgrade to the latest version of Rapid7 InsightVM Scan Assistant | Jan 3, 2024 | May 11, 2023 |
| Redhat Openshift | — | Upgrade buildahUpgrade podmanUpgrade skopeoUpgrade openshiftUpgrade openshift-clients | Jun 8, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade podman-catatonitUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade toolboxUpgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade toolbox-debugsourceUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade criuUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade golang-srcUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debuginfoUpgrade delveUpgrade criu-develUpgrade golang-raceUpgrade golang-testsUpgrade criu-libs-debuginfoUpgrade delve-debuginfoUpgrade crun-debugsourceUpgrade golang-docsUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade runcUpgrade python3-podmanUpgrade netavarkUpgrade crunUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-binUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade criu-libsUpgrade delve-debugsourceUpgrade critUpgrade toolbox-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-testsUpgrade buildah-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfsUpgrade criu-debugsourceUpgrade podman-gvproxyUpgrade conmon-debugsourceNo solution existsUpgrade criu-debuginfoUpgrade cockpit-podmanUpgrade golang-miscUpgrade slirp4netnsUpgrade udicaUpgrade buildahUpgrade python3-criuUpgrade skopeo-debuginfoUpgrade slirp4netns-debuginfoUpgrade golangUpgrade go-toolsetUpgrade buildah-testsUpgrade podman-plugins-debuginfoUpgrade skopeo-debugsourceUpgrade aardvark-dnsUpgrade podman-dockerUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade container-selinuxUpgrade toolbox-testsUpgrade crun-debuginfoUpgrade libslirp | May 29, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade crunUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade crun-debugsourceUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade runcUpgrade criu-debuginfoUpgrade golangUpgrade criuUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade golang-binUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade critUpgrade podmanUpgrade podman-remoteUpgrade conmon-debugsourceUpgrade golang-raceUpgrade crun-debuginfoUpgrade delve-debuginfoUpgrade criu-debugsourceUpgrade criu-develUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade conmonUpgrade delveUpgrade podman-plugins-debuginfoUpgrade criu-libsUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade buildah-testsUpgrade slirp4netns-debuginfoUpgrade libslirpUpgrade buildahUpgrade aardvark-dnsUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debuginfoUpgrade go-toolsetUpgrade slirp4netns-debugsourceUpgrade podman-testsUpgrade libslirp-develUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook | Mar 5, 2024 | May 11, 2023 |
| Suse | — | Upgrade go1.20-docUpgrade go1.19Upgrade go1.20Upgrade go1.20-raceUpgrade go1.19-raceUpgrade go1.19-doc | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19-goUpgrade golang-1.20Upgrade golang-1.20-goUpgrade golang-1.20-srcUpgrade golang-1.19-srcUpgrade golang-1.19 | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub